re: Build your DMARC record in 15 minutes

https://blog.returnpath.com/build-your-dmarc-record-in-15-minutes-v2/

domain = example.com
mail2.@ A 1.1.1.1
@ mx 10 mail2.example.com
@ mx 20 smtp.secureserver.net
@ mx 30 mailstore1.secureserver.net

@ txt v=spf1 ip4:1.1.1.1 include:secureserver.net -all
_dmarc.@ txt v=DMARC1; p=none; rua=mailto:xxxxxx@mxtoolbox.dmarc-report.com,mailto:xxxxxxx@ag.dmarcian.com;

smtp test:

Connecting to 1.1.1.1

220 mail2.example.com Kerio Connect 8.0.0 ESMTP ready [11095 ms]
EHLO PWS3.mxtoolbox.com
250-mail2.example.com
250-AUTH CRAM-MD5 PLAIN LOGIN
250-SIZE 52428800
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-PIPELINING
250-ETRN
250-DSN
250 HELP [672 ms]
MAIL FROM:<supertool@mxtoolbox.com>
250 2.1.0 Sender <supertool@mxtoolbox.com> ok [719 ms]
RCPT TO:<test@maxpain.com>
550 5.7.1 Relaying to <test@maxpain.com> denied (authentication required) [672 ms]

should i create a SPF record for mail2.example.com?
eg: mail2.@ txt v=spf1 ip4:1.1.1.1 -all

and a DKIM or DMARC ?

Please & Thanks.

https://blog.returnpath.com/build-your-dmarc-record-in-15-minutes-v2/#comment-3304653950

re: How to explain authenticated received chain (ARC) in plain english.

https://blog.returnpath.com/how-to-explain-authenticated-received-chain-arc-in-plain-english-2/

This is stupid,
you send the email to the list, end of story, it reaches it’s destination.
the list server, should now send out the message to those in the list, using its own DMARC, DKIM, SPF.

it’s like they want spam to be legit, for the grace of GOD, drop this ARC stuff.
what this is, it’s allowing someone to modify your message, and pass it on as you.

We need to get to a point where we all have, DMARC=reject & SPF= -all, and if the message does not come with DKIM, reject it.
https://blog.returnpath.com/how-to-explain-authenticated-received-chain-arc-in-plain-english-2/#comment-3304585202

 

iRedMail support for DMARC?

http://www.iredmail.org/forum/post56001.html#p56001

 

V-locity 5 Install and Configuration

V-locity 5 Install and Configuration

 

Improving Logon Time with PVS Accelerator

Improving Logon Time with PVS Accelerator

 

Comparison of on-premises HCI vs Microsoft Azure

http://msandbu.org/comparison-of-on-premises-hci-vs-microsoft-azure/#comment-5679

 

Cool new things for Hyper-V on Windows 10

https://blogs.technet.microsoft.com/virtualization/2017/01/10/cool-new-things-for-hyper-v-on-desktop/

 

“Changes in memory allocation”

from the information in this blog about the memory, this might be why AppSense have change or disable their memory optimizer,
http://blog.appsense.com/2017/01/appsense-performance-manager-v10-1/

It was a very good solution to a windows problem. I have ask for a feature just like this from Windows 2000 Pro days, with windows terminal server, plus other features that I have not seen yet, for example:

1) How can you limit each user in Terminal Server a set of reassures (eg 2vCPU 8GBvRAM 400vIOPs 500MBvNIC)

2) How can you limit IE, Outlook, etc.. in each user session, don’t eat away the TS reassures ( solution: appsense-performance-manager)

3) If a user using TS gateway & webAccess, login to a different system, all the apps that are open by that user will appear on that system screen, as to say the apps follower him/her to that computer.

4) Auto-Inline-Defrag & Dedup & Compression – I hope RFS can fix these issues or add these features.

5) Minimize the amount of IOPs Windows Server & Desktop need –
http://www.atlantiscomputing.com/downloads/Windows_7_IOPS_for_VDI_a_Deep_Dive_1_0.pdf
http://www.condusiv.com/ is trying to fix this problem with 3 product (Diskeeper, SSDkeeper, V-Locity)

6) Memeory dedup & compression – I once say a blog that this will be in windows 10, not sure about server 2016.

From what I see AppSense & condusiv is doing most if not all of the things that windows itself should have had from day one.
Just hope Microsoft can add all these features to Windows 10 & Server 2016 .

Thanks.