{"id":2594,"date":"2021-06-15T10:07:33","date_gmt":"2021-06-15T08:07:33","guid":{"rendered":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/?p=2594"},"modified":"2021-07-14T09:30:44","modified_gmt":"2021-07-14T07:30:44","slug":"mejorar-la-seguridad-del-correo-electronico-ii-encamina","status":"publish","type":"post","link":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/","title":{"rendered":"Mejorar la seguridad del correo electr\u00f3nico (II)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2649\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png\" alt=\"\" width=\"1093\" height=\"740\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png 1093w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM-300x203.png 300w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM-1024x693.png 1024w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM-768x520.png 768w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM-610x413.png 610w\" sizes=\"auto, (max-width: 1093px) 100vw, 1093px\" \/><\/p>\n<p>Tras <a href=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-en-el-correo-electronico-parte-i\/\" target=\"_blank\" rel=\"noopener\">el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico<\/a>, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0<img decoding=\"async\" class=\"emoji\" role=\"img\" draggable=\"false\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/13.0.1\/svg\/1f609.svg\" alt=\"\ud83d\ude09\" \/><\/p>\n<p><!--more--><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Configurando_SPF\"><\/span><span data-contrast=\"auto\">Configurando SPF<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span data-contrast=\"auto\">Como dec\u00eda <a href=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-en-el-correo-electronico-parte-i\/\" target=\"_blank\" rel=\"noopener\">en el primer art\u00edculo,<\/a> configurar SPF no ser\u00eda necesario, ya que viene en los registros por defecto. Adem\u00e1s, no requiere configurar nada en Microsoft 365, solo en el panel de control de nuestro dominio. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Hay 2 formas de saber si tenemos configurado SPF, la primera revisando los registros de nuestro portal DNS:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2634\" style=\"font-size: 16px;\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-1.png\" alt=\"\" width=\"567\" height=\"39\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-1.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-1-300x21.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">O\u00a0en cualquiera de\u00a0las diversas webs\u00a0de herramientas de\u00a0revisi\u00f3n\u00a0que existen, en mi caso suelo usar MXTOOLBOX, la cual es gratuita en\u00a0las consultas\u00a0b\u00e1sicas:\u00a0<\/span><a href=\"https:\/\/mxtoolbox.com\/\"><span data-contrast=\"none\">https:\/\/mxtoolbox.com\/<\/span><\/a><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2635\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-2.png\" alt=\"\" width=\"567\" height=\"71\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-2.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-2-300x38.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><span data-contrast=\"auto\">El cual indica que est\u00e1 habilitado.\u00a0 Por lo tanto, todo correcto. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Si no estuviese habilitado y nuestro servidor pertenece a Microsoft 365, solo deber\u00edamos crear el registro deseado o agregar a nuestro portal DNS el registro TXT con este valor: <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">v=spf1 include:spf.protection.outlook.com -all<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Los pasos para agregar este registro dependen del portal DNS contratado, por\u00a0que pr\u00e1cticamente cada proveedor tiene portal personalizado y por lo tanto se configura con distintos pasos.\u00a0Por\u00a0ejemplo,\u00a0en nuestro portal es as\u00ed:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2636\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-3.png\" alt=\"\" width=\"326\" height=\"288\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-3.png 326w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-3-300x265.png 300w\" sizes=\"auto, (max-width: 326px) 100vw, 326px\" \/><\/span><\/p>\n<p><span data-contrast=\"auto\">\u00bfQue hemos configurado?:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">v=:<\/span><\/b><span data-contrast=\"auto\">\u00a0define la versi\u00f3n usada de SPF (versi\u00f3n 1).<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Include:<\/span><\/b><span data-contrast=\"auto\">\u00a0es la direcci\u00f3n v\u00e1lida, aqu\u00ed podemos agregar m\u00e1s de una.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">~all<\/span><\/b><span data-contrast=\"auto\">\u00a0sugiere desautorizaci\u00f3n a las m\u00e1quinas que no encajen en lo autorizado expl\u00edcitamente.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Con este registro estar\u00edamos informando al resto de los servidores de correo que solo enviamos correos v\u00e1lidos desde Office 365, y que cualquier correo que no tenga ese origen, no es\u00a0leg\u00edtimo.\u00a0Ojo si tenemos\u00a0proveedores de\u00a0Mailings\u00a0externos como por ejemplo\u00a0mailchimp, tendremos que agregarlos.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">En caso de que nuestro Servidor de correo no se encuentre en\u00a0Microsoft 365, tengamos otro\u00a0enviador\u00a0v\u00e1lido, o simplemente queramos reforzar\u00a0la seguridad, hay bastantes par\u00e1metros que podemos agregar o modificar<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/docs.microsoft.com\/es-es\/microsoft-365\/security\/office-365-security\/set-up-spf-in-office-365-to-help-prevent-spoofing?view=o365-worldwide\"><span data-contrast=\"none\">Configurar SPF para ayudar a evitar la suplantaci\u00f3n de identidad &#8211; Office 365 | Microsoft\u00a0Docs<\/span><\/a><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Incluso podemos usar algunas webs gratuitas que nos ayudan a configurarlo:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/www.spfwizard.net\/\"><span data-contrast=\"none\">https:\/\/www.spfwizard.net\/<\/span><\/a><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Configurando_DMARC\"><\/span><span data-contrast=\"auto\">Configurando DMARC<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span data-contrast=\"auto\">La configuraci\u00f3n de DMARC, es casi id\u00e9ntica en los pasos a realizar, solo cambia el contenido del registro TXT, por lo tanto, solo\u00a0requiere de configuraci\u00f3n en nuestro portal DNS.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Para configurar\u00a0DMARC debemos agregar un registro TXT en nuestro portal DNS el cual debemos de \u201cconstruir\u201d nosotros previamente.\u00a0Este es el m\u00e1s usado para Microsoft 365 y el que podemos encontrar en la p\u00e1gina oficial:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">_dmarc.domain\u00a0 TTL\u00a0 IN\u00a0 TXT\u00a0 \u00abv=DMARC1; p=policy;\u00a0pct=100\u00bb<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">A este registro solo debemos cambiar la palabra\u00a0domain, por nuestro dominio\u00a0y configurar algunos\u00a0parametros.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">_dmarc.jmcastillo.eu\u00a0 3600 IN\u00a0 TXT\u00a0 \u00abv=DMARC1; p=reject\u00bb<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Para configurarlo solo debemos agregar un registro Tipo TXT a nuestro portal DNS:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2637\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-4.png\" alt=\"\" width=\"358\" height=\"269\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-4.png 358w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-4-300x225.png 300w\" sizes=\"auto, (max-width: 358px) 100vw, 358px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Y con eso ya estar\u00eda configurado.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2638\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-5.png\" alt=\"\" width=\"567\" height=\"72\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-5.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-5-300x38.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">\u00bfQue hemos configurado?:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><i><span data-contrast=\"none\">domain<\/span><\/i><\/b><span data-contrast=\"none\">\u202fes el dominio que quiere proteger. De forma predeterminada, el registro protege el correo del dominio y todos los subdominios. Por ejemplo, si especifica _dmarc.jmcastillo.eu, DMARC protege correo del dominio y todos los subdominios, como housewares.jmcastillo.eu\u00a0o plumbing.jmcastillo.eu<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559685&quot;:1290,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><i><span data-contrast=\"none\">TTL<\/span><\/i><\/b><span data-contrast=\"none\">\u202fsiempre debe ser el equivalente a una hora. La unidad usada para el TTL, ya sean las horas (1 hora), los minutos (60 minutos) o los segundos (3600 segundos), variar\u00e1 en funci\u00f3n del registrador del dominio.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559685&quot;:1290,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><i><span data-contrast=\"none\">pct=100<\/span><\/i><\/b><span data-contrast=\"none\">\u202findica que esta regla debe usarse para el 100 % del correo electr\u00f3nico.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559685&quot;:1290,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><i><span data-contrast=\"none\">policy<\/span><\/i><\/b><span data-contrast=\"none\">\u202fespecifica qu\u00e9 directiva quiere que el servidor de recepci\u00f3n siga si se produce un error en DMARC. Puede establecer la directiva en\u00a0none,\u00a0quarantine\u00a0o\u00a0reject.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559685&quot;:1290,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">Para recibir informes de error con DMARC, se utiliza la etiqueta \u00abruf\u00bb. Esta etiqueta act\u00faa de manera similar a la etiqueta \u00abrua\u00bb (que env\u00eda informes agregados de DMARC) en que se especifica la direcci\u00f3n de correo electr\u00f3nico o las direcciones de correo electr\u00f3nico a las que enviar informes de error. <\/span><\/p>\n<p><span data-contrast=\"auto\">Esta etiqueta tiene el formato de una lista separada por comas de direcciones \u00abmailto:\u00bb. Por ejemplo, si deseas recibir informes de errores en el buz\u00f3n \u00abdmarc-failures@jmcastillo.eu\u00bb, debes establecer la etiqueta \u00abruf\u00bb en ruf=\u00bbmailto:dmarc-failures@jmcastillo.eu\u00bb. Si deseas que los informes vayan a varios correos electr\u00f3nicos o a un procesador de informes DMARC, la etiqueta se ver\u00eda as\u00ed: ruf=\u00bbmailto:dmarc-failures@jmcastillo.eu\u00bb, mailto:dmarc-failures@jmcastillo.eu<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Para\u00a0rua, quedar\u00eda de forma similar:\u00a0rua=\u00bbmailto:dmarc-data@jmcastillo.eu\u00bb,\u00a0mailto:dmarc-data@jmcastillo.eu<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Si publica una directiva de rechazo de DMARC (p=reject), ning\u00fan otro cliente de Office 365 podr\u00e1 suplantar la identidad del dominio porque los mensajes no podr\u00e1n pasar las comprobaciones de SPF o DKIM para el dominio al retransmitir un mensaje saliente a trav\u00e9s del servicio. Sin embargo, si publica una directiva de rechazo de DMARC, pero no dispone de todo el correo electr\u00f3nico autenticado a trav\u00e9s de Microsoft 365, una parte del correo entrante puede ser marcado como correo no deseado (como se describi\u00f3 anteriormente) o se rechazar\u00e1 si no publica SPF e intenta retransmitirlo para que salga a trav\u00e9s del servicio. Esto sucede, por ejemplo, si se olvida de incluir algunas de las direcciones IP para servidores y aplicaciones que env\u00edan correo en nombre de su dominio al formular el registro TXT de DMARC.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"_DKIM\"><\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">DKIM<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span data-contrast=\"auto\">Al contrario de los registros anteriores, este si que requiere de\u00a0configuraci\u00f3n en el portal de Microsoft 365.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Lo primero que debemos hacer es revisar si DKIM est\u00e1 configurado ya en nuestro entorno, para ello nos dirigimos al centro de administraci\u00f3n de Microsoft 365, en el apartado seguridad y complimiento y\u00a0en administraci\u00f3n de amenazas pichamos en directivas:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2639\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-6.png\" alt=\"\" width=\"567\" height=\"203\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-6.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-6-300x107.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Pinchamos en DKIM y vemos el estado:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2640\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-7.png\" alt=\"\" width=\"462\" height=\"159\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-7.png 462w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-7-300x103.png 300w\" sizes=\"auto, (max-width: 462px) 100vw, 462px\" \/><\/span><\/p>\n<p><span data-contrast=\"auto\">Eso significa que no est\u00e1 activado.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">Como prerequisito para configurar DKIM, recordad que debemos tener el m\u00f3dulo powershell EXO v2 instalado en la m\u00e1quina desde la que conectemos a Exchange online: <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Si no es as\u00ed, debemos seguir los pasos desde este art\u00edculo de Microsoft: <\/span><a href=\"https:\/\/docs.microsoft.com\/es-es\/powershell\/exchange\/connect-to-exchange-online-powershell?view=exchange-ps\"><span data-contrast=\"none\">Conexi\u00f3n a Exchange Online PowerShell | Microsoft\u00a0Docs<\/span><\/a><span data-contrast=\"auto\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Una vez conectados, lo primero que tendremos que hacer (despu\u00e9s de iniciar sesi\u00f3n) es ejecutar el siguiente comando:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">New-DkimSigningConfig\u00a0-DomainName\u00a0&lt;Nombre del dominio&gt; -KeySize\u00a02048 -Enabled\u00a0$true<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2641\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-8.png\" alt=\"\" width=\"567\" height=\"50\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-8.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-8-300x26.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-contrast=\"auto\">Tras esperar unos segundos, la respuesta del comando debe ser:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2642\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-9.png\" alt=\"\" width=\"567\" height=\"116\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-9.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-9-300x61.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-contrast=\"auto\">Es l\u00f3gica la respuesta que nos devuelve. A\u00fan no conoc\u00edamos los registros CNAME, as\u00ed que hemos creado la configuraci\u00f3n, pero no se ha habilitado. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">**Nota para usuarios m\u00e1s experimentados:<\/span><span data-contrast=\"auto\"> El registro CNAME es f\u00e1cil de construir ya que solo var\u00edaa el nombre del dominio. Si sabemos c\u00f3mo construirlo y primero generamos el registro CNAME en el panel DNS, tras este comando quedar\u00e1 creado y habilitado. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Mientras, en portal Microsoft 365 el estado de DKIM ya ha cambiado y confirma que est\u00e1 creado, pero no habilitado: <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2643\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-10.png\" alt=\"\" width=\"449\" height=\"281\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-10.png 449w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-10-300x188.png 300w\" sizes=\"auto, (max-width: 449px) 100vw, 449px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">Tras este paso, debemos ir al\u00a0panel de control\u00a0de nuestro DNS y crear 2 registros CNAME con los valores que nos devolvi\u00f3\u00a0powershell:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">selector1-jmcastillo-eu._domainkey.jmcastillogarcia.onmicrosoft.com<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">selector2-jmcastillo-eu._domainkey.jmcastillogarcia.onmicrosoft.com<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">As\u00ed es en nuestro portal:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2644\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-11.png\" alt=\"\" width=\"916\" height=\"1483\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-11.png 916w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-11-185x300.png 185w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-11-632x1024.png 632w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-11-768x1243.png 768w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-11-610x988.png 610w\" sizes=\"auto, (max-width: 916px) 100vw, 916px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Resultando:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2645\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/Imagen11.png\" alt=\"\" width=\"567\" height=\"71\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/Imagen11.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/Imagen11-300x38.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">Tras ello tenemos 2 v\u00edas de activaci\u00f3n: por el portal, o por powershell.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Por el portal de Microsoft 365, debemos volver a la pol\u00edtica y activar el\u00a0check\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2646\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-12.png\" alt=\"\" width=\"449\" height=\"281\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-12.png 449w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-12-300x188.png 300w\" sizes=\"auto, (max-width: 449px) 100vw, 449px\" \/><\/span><\/p>\n<p><span data-contrast=\"auto\">Y si todo ha ido bien, aparece este mensaje.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2647\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-13.png\" alt=\"\" width=\"567\" height=\"249\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-13.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-13-300x132.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">Por\u00a0powershell\u00a0debemos introducir este comando:\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Set-DkimSigningConfig\u00a0-Identity\u00a0jmcastillo.eu\u00a0-Enabled\u00a0$true<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2648\" src=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-14.png\" alt=\"\" width=\"567\" height=\"57\" srcset=\"https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-14.png 567w, https:\/\/encaminablogs.wpenginepowered.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/seguridad-correo-14-300x30.png 300w\" sizes=\"auto, (max-width: 567px) 100vw, 567px\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"auto\">Con estos pasos, hemos <strong>mejorado la seguridad en el tr\u00e1fico de correo<\/strong> y hemos mejorado<strong> la experiencia de los usuarios<\/strong> y la confiabilidad en el uso del correo. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<!-- AddThis Advanced Settings generic via filter on the_content --><!-- AddThis Share Buttons generic via filter on the_content --><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Tabla de contenidos<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#Configurando_SPF\" >Configurando SPF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#Configurando_DMARC\" >Configurando DMARC<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#_DKIM\" >\u00a0DKIM<\/a><\/li><\/ul><\/nav><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0<!-- AddThis Advanced Settings generic via filter on get_the_excerpt --><!-- AddThis Share Buttons generic via filter on get_the_excerpt --><\/p>\n","protected":false},"author":195,"featured_media":2649,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2594","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sin-categoria"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v18.2.1 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Mejorar la seguridad del correo electr\u00f3nico (II)<\/title>\n<meta name=\"description\" content=\"Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mejorar la seguridad del correo electr\u00f3nico (II)\" \/>\n<meta property=\"og:description\" content=\"Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/\" \/>\n<meta property=\"og:site_name\" content=\"Por una nube sostenible\" \/>\n<meta property=\"article:published_time\" content=\"2021-06-15T08:07:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-14T07:30:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1093\" \/>\n\t<meta property=\"og:image:height\" content=\"740\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Jos\u00e9 Manuel Castillo Garc\u00eda\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jos\u00e9 Manuel Castillo Garc\u00eda\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/\"},\"author\":{\"name\":\"Jos\u00e9 Manuel Castillo Garc\u00eda\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/#\\\/schema\\\/person\\\/3bd2ce319c4b139fdd474e867feee729\"},\"headline\":\"Mejorar la seguridad del correo electr\u00f3nico (II)\",\"datePublished\":\"2021-06-15T08:07:33+00:00\",\"dateModified\":\"2021-07-14T07:30:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/\"},\"wordCount\":1281,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/wp-content\\\/uploads\\\/sites\\\/19\\\/2021\\\/06\\\/post-JM.png\",\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/\",\"url\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/\",\"name\":\"Mejorar la seguridad del correo electr\u00f3nico (II)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/wp-content\\\/uploads\\\/sites\\\/19\\\/2021\\\/06\\\/post-JM.png\",\"datePublished\":\"2021-06-15T08:07:33+00:00\",\"dateModified\":\"2021-07-14T07:30:44+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/#\\\/schema\\\/person\\\/3bd2ce319c4b139fdd474e867feee729\"},\"description\":\"Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#primaryimage\",\"url\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/wp-content\\\/uploads\\\/sites\\\/19\\\/2021\\\/06\\\/post-JM.png\",\"contentUrl\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/wp-content\\\/uploads\\\/sites\\\/19\\\/2021\\\/06\\\/post-JM.png\",\"width\":1093,\"height\":740},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mejorar la seguridad del correo electr\u00f3nico (II)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/#website\",\"url\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/\",\"name\":\"Por una nube sostenible\",\"description\":\"C\u00f3mo no romper los l\u00edmites, c\u00f3mo crear una buena arquitectura y c\u00f3mo hacer un buen mantenimiento\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/#\\\/schema\\\/person\\\/3bd2ce319c4b139fdd474e867feee729\",\"name\":\"Jos\u00e9 Manuel Castillo Garc\u00eda\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f75d154576ba73acce0b765cbfb7c29c8a6c202240f069f306ec333d34b9171c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f75d154576ba73acce0b765cbfb7c29c8a6c202240f069f306ec333d34b9171c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f75d154576ba73acce0b765cbfb7c29c8a6c202240f069f306ec333d34b9171c?s=96&d=mm&r=g\",\"caption\":\"Jos\u00e9 Manuel Castillo Garc\u00eda\"},\"description\":\"Modern Workplace Specialist en ENCAMINA. Reconocido por Microsoft como Enterprise Administrator (MCSE). Especialista en adopciones y migraciones de servicios a la nube de Microsoft con 5 a\u00f1os de experiencia. Apasionado de la tecnolog\u00eda, disfruto mucho construyendo entornos que despu\u00e9s sirven para mejorar la productividad y reducir los tiempos de ejecuci\u00f3n. Me encanta impartir formaci\u00f3n a los usuarios y\\\/o administradores de las tecnolog\u00edas que conozco.\",\"url\":\"https:\\\/\\\/blogs.encamina.com\\\/por-una-nube-sostenible\\\/author\\\/jmcastillo\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Mejorar la seguridad del correo electr\u00f3nico (II)","description":"Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/","og_locale":"es_ES","og_type":"article","og_title":"Mejorar la seguridad del correo electr\u00f3nico (II)","og_description":"Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0","og_url":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/","og_site_name":"Por una nube sostenible","article_published_time":"2021-06-15T08:07:33+00:00","article_modified_time":"2021-07-14T07:30:44+00:00","og_image":[{"width":1093,"height":740,"url":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png","type":"image\/png"}],"author":"Jos\u00e9 Manuel Castillo Garc\u00eda","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Jos\u00e9 Manuel Castillo Garc\u00eda","Tiempo de lectura":"9 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#article","isPartOf":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/"},"author":{"name":"Jos\u00e9 Manuel Castillo Garc\u00eda","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/#\/schema\/person\/3bd2ce319c4b139fdd474e867feee729"},"headline":"Mejorar la seguridad del correo electr\u00f3nico (II)","datePublished":"2021-06-15T08:07:33+00:00","dateModified":"2021-07-14T07:30:44+00:00","mainEntityOfPage":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/"},"wordCount":1281,"commentCount":1,"image":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png","inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/","url":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/","name":"Mejorar la seguridad del correo electr\u00f3nico (II)","isPartOf":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#primaryimage"},"image":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png","datePublished":"2021-06-15T08:07:33+00:00","dateModified":"2021-07-14T07:30:44+00:00","author":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/#\/schema\/person\/3bd2ce319c4b139fdd474e867feee729"},"description":"Tras el primer art\u00edculo en el que os contaba c\u00f3mo mejorar la seguridad del correo electr\u00f3nico, toca ponernos\u00a0manos a la obra con la configuraci\u00f3n de SPF, DMARC y DKIM\u00a0","breadcrumb":{"@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#primaryimage","url":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png","contentUrl":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-content\/uploads\/sites\/19\/2021\/06\/post-JM.png","width":1093,"height":740},{"@type":"BreadcrumbList","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/mejorar-la-seguridad-del-correo-electronico-ii-encamina\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/"},{"@type":"ListItem","position":2,"name":"Mejorar la seguridad del correo electr\u00f3nico (II)"}]},{"@type":"WebSite","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/#website","url":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/","name":"Por una nube sostenible","description":"C\u00f3mo no romper los l\u00edmites, c\u00f3mo crear una buena arquitectura y c\u00f3mo hacer un buen mantenimiento","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/#\/schema\/person\/3bd2ce319c4b139fdd474e867feee729","name":"Jos\u00e9 Manuel Castillo Garc\u00eda","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/f75d154576ba73acce0b765cbfb7c29c8a6c202240f069f306ec333d34b9171c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f75d154576ba73acce0b765cbfb7c29c8a6c202240f069f306ec333d34b9171c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f75d154576ba73acce0b765cbfb7c29c8a6c202240f069f306ec333d34b9171c?s=96&d=mm&r=g","caption":"Jos\u00e9 Manuel Castillo Garc\u00eda"},"description":"Modern Workplace Specialist en ENCAMINA. Reconocido por Microsoft como Enterprise Administrator (MCSE). Especialista en adopciones y migraciones de servicios a la nube de Microsoft con 5 a\u00f1os de experiencia. Apasionado de la tecnolog\u00eda, disfruto mucho construyendo entornos que despu\u00e9s sirven para mejorar la productividad y reducir los tiempos de ejecuci\u00f3n. Me encanta impartir formaci\u00f3n a los usuarios y\/o administradores de las tecnolog\u00edas que conozco.","url":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/author\/jmcastillo\/"}]}},"_links":{"self":[{"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/posts\/2594","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/users\/195"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/comments?post=2594"}],"version-history":[{"count":0,"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/posts\/2594\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/media\/2649"}],"wp:attachment":[{"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/media?parent=2594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/categories?post=2594"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.encamina.com\/por-una-nube-sostenible\/wp-json\/wp\/v2\/tags?post=2594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}