Benchmark: Mail Exchange (MX) Records
Overview
A DNS Mail Exchange (MX) record specifies the mail server responsible for accepting email messages on behalf of a domain name. The MX record indicates how email messages should be routed in accordance with the Simple Mail Transfer Protocol (SMTP).
This benchmark contains best practices for MX records.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-net-insights
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Mail Exchange (MX) Records.
Run this benchmark in your terminal:
powerpipe benchmark run net_insights.benchmark.dns_mx_best_practices
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run net_insights.benchmark.dns_mx_best_practices --share
Controls
- MX records should have valid hostname
- MX records should use public IPs
- MX records should not contain IP address
- DNS should have at least 2 MX records
- MX records should not have duplicate A records
- MX records should have reverse A record (PTR)
- DMARC should be enabled for your domain