Mail server name : mail.zw3b.eu
--------------------------------
Zimbra Release 8.8.15.GA.4179.UBUNTU20.64 UBUNTU20_64 FOSS edition, Patch 8.8.15_P44.
-------------------------------------------------------------------------------------
# name mail.zw3b.eu
zimbraServiceEnabled: amavis
zimbraServiceEnabled: antivirus
zimbraServiceEnabled: spell
zimbraServiceEnabled: memcached
zimbraServiceEnabled: logger
zimbraServiceEnabled: service
zimbraServiceEnabled: zimbra
zimbraServiceEnabled: zimbraAdmin
zimbraServiceEnabled: zimlet
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: mta
zimbraServiceEnabled: ldap
zimbraServiceEnabled: stats
zimbraServiceEnabled: snmp

---------------------------
Rspamd daemon version 3.7.1
---------------------------
CPU architecture x86_64; features: sse2, sse3
Hyperscan enabled: TRUE
Jemalloc enabled: TRUE
LuaJIT enabled: TRUE (LuaJIT version: LuaJIT 2.1.1695653777)
ASAN enabled: FALSE
BLAS enabled: FALSE
Fasttext enabled: FALSE

-------------------------------------------------------------------------------------

SPF: zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=spf:zw3b.eu&run=toolpage
SPF: ww2.zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=spf:ww2.zw3b.eu&run=toolpage

-------------------------------------------------------------------------------------
DKIM: zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=dkim:2023091701._domainkey.zw3b.eu&run=toolpage
DKIM: ww2.zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=dkim:2023102602._domainkey.ww2.zw3b.eu&run=toolpage

-------------------------------------------------------------------------------------
DMARC: zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=dmarc:zw3b.eu&run=toolpage
   v=DMARC1; p=quarantine; sp=reject; pct=100; aspf=s; adkim=s; rua=mailto:....;

DMARC: ww2.zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=ww2.dmarc:zw3b.eu&run=toolpage
   v=DMARC1; p=reject; sp=reject; pct=100; aspf=s; adkim=s; rua=mailto:....;

 		Test 				Result
--------------- ------------------------------- --------------------------------------
Status Ok	DMARC Record Published 		DMARC Record found
Status Ok	DMARC Syntax Check 		The record is valid
Status Ok	DMARC External Validation 	All external domains in your DMARC record are giving permission to send them DMARC reports.
Status Ok	DMARC Multiple Records 		Multiple DMARC records corrected to a single record.
Status Ok	DMARC Policy Not Enabled 	DMARC Quarantine/Reject policy enabled

-------------------------------------------------------------------------------------
MX: zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=mx:zw3b.eu&run=toolpage
MX: ww2.zw3b.eu -> https://mxtoolbox.com/SuperTool.aspx?action=mx:ww2.zw3b.eu&run=toolpage

Pref 	Hostname 	IP Address 			TTL 	
----- ----------------- ------------------------------- ------
10 	smtp.zw3b.eu 	{No A Record} 			60 min 	
10 	smtp.zw3b.eu 	2607:5300:60:9389:17:4c1:0:1a 	60 min 	

 		Test 				Result
--------------- ------------------------------- --------------------------------------
Status Ok	DMARC Record Published 		DMARC Record found
Status Ok	DMARC Policy Not Enabled 	DMARC Quarantine/Reject policy enabled
Status Ok	DNS Record Published 		DNS Record found

-----------------------------------------------------------------
Email test: @zw3b.eu -> https://internet.nl/mail/zw3b.eu/1051102/
Email test: @ww2.zw3b.eu -> https://internet.nl/mail/ww2.zw3b.eu/1051116/
--------------------
The domain zw3b.eu has a test score of 91%.

Failed : Not reachable via modern internet address, or improvement possible (IPv6)

   IPv6 addresses for name servers
   ------------------------------
   Verdict: Only one name server of your domain has an IPv6 address. 

Passed : All domain names signed (DNSSEC)
Passed : Authenticity marks against email phishing (DMARC, DKIM and SPF)
Failed : Mail server connection not or insufficiently secured (STARTTLS and DANE)
   
   Ciphers (Algorithm selections)
   ------------------------------
      Verdict: At least one of your mail servers supports one or more ciphers that have a phase out status, because they are known to be fragile and are at risk of becoming insufficiently secure.
   
      Technical details:
   
      Mail server (MX) 	   First found affected cipher 	   Status
      -------------------- ------------------------------- ----------------
      smtp.zw3b.eu. 	   AES128-GCM-SHA256 		   phase out

   Key exchange parameters
   ------------------------
      Verdict: At least one of your mail servers supports insufficiently secure parameters for Diffie-Hellman key exchange.
   
      Technical details:
      ------------------------------------------------------------
      Mail server (MX) 	   Affected parameters 	   Security level
      -------------------- ----------------------- ---------------
      smtp.zw3b.eu. 	   DH-2048 		   insufficient

Passed : Authorised route announcement (RPKI)
-------------------------------------------------------------------------------------

-------------------------------------------------------------------------------------
ZW3B.EU Domain Health Report -> https://mxtoolbox.com/emailhealth/zw3b.eu/