EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·7d ago·5 min read
Golang tool to check SPF, DKIM, TLSA, and TLS settings for mailservers
TL;DR
A new command-line tool written in Go checks mail server configurations for SPF, DKIM, TLSA, and TLS settings. It provides diagnostic output compatible with Nagios/Icinga, enhancing mail server security assessments.
✦ Why It Matters
Use this tool today to ensure your mail server configurations are secure and compliant with modern standards.
Key Takeaways
- Verify SPF and DKIM settings for your domain.
- Check TLS configurations for compliance with modern standards.
- Integrate the tool with Nagios/Icinga for monitoring.
- Conduct regular audits of mail server security settings.
Full Summary
This tool is designed to help system administrators verify that their domains are properly configured to receive SMTP mail. It performs several checks, including certificate parsing, hostname verification, and expiration date validation.
Additionally, it classifies TLS versions (1.2 and 1.3) and modern cipher suites, ensuring secure connections. The tool also conducts TLSA lookups to match certificates and public keys according to specified usages.
Furthermore, it indicates DNSSEC validation through the AD bit from the recursive resolver. By providing Nagios/Icinga-compatible output, it integrates seamlessly into existing monitoring systems, allowing for proactive mail server management.