force DMARC enforcement for gmail.com

2024-04-15 11:42:03 -04:00 · 2024-04-15 11:42:03 -04:00 · 9f84c50869
parent 8278883a84
commit 9f84c50869
1 changed files with 4 additions and 0 deletions
--- a/unbound.conf
+++ b/unbound.conf
@ -28,6 +28,10 @@ server:
    # AF21
    ip-dscp: 18

+# force DMARC enforcement
+local-zone: "_dmarc.gmail.com" static
+local-data: '_dmarc.gmail.com 600 IN TXT "v=DMARC1; p=quarantine; rua=mailto:mailauth-reports@google.com"'
+
 forward-zone:
    name: "."
    forward-tls-upstream: yes