Merge pull request #236 from ministryofjustice/AntonyBishop-patch-2

Add defensive email domain DNS records to dsd.io
ministryofjustice · Oct 22, 2024 · 38e2d7e · 38e2d7e
2 parents b503296 + bffba3b
commit 38e2d7e
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/hostedzones/dsd.io.yaml b/hostedzones/dsd.io.yaml
@@ -12,6 +12,12 @@
       - ns-1676.awsdns-17.co.uk.
       - ns-262.awsdns-32.com.
       - ns-613.awsdns-12.net.
+  - ttl: 300
+    type: TXT
+    value: v=spf1 -all
+  - ttl: 300
+    type: CNAME
+    value: v=DKIM1; p=
 7vyvfadjerzncwgstpglhj6bwd5ekpbo._domainkey.ppo:
   ttl: 1800
   type: CNAME
@@ -109,13 +115,7 @@ _bfa871d9ae35776361503dc9a3a10db1.tax-tribunals-datacapture-staging:
 _dmarc:
   ttl: 300
   type: TXT
-  value:
-    v=DMARC1\;p=none\;sp=none\;fo=1\;rua=mailto:[email protected]\;
-    ruf=mailto:[email protected]
-_smtp._tls:
-  ttl: 300
-  type: TXT
-  value: v=TLSRPTv1\;rua=mailto:[email protected]
+  value: v=DMARC1;p=reject;rua=mailto:[email protected];
 acceleratedpossession:
   ttl: 300
   type: NS