{"id":11157,"date":"2026-06-20T19:28:08","date_gmt":"2026-06-20T19:28:08","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/06\/20\/spf-dkim-dmarc-nedir-biznes-email-spam-qorunma\/"},"modified":"2026-06-20T19:28:08","modified_gmt":"2026-06-20T19:28:08","slug":"spf-dkim-dmarc-nedir-biznes-email-spam-qorunma","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/06\/20\/spf-dkim-dmarc-nedir-biznes-email-spam-qorunma\/","title":{"rendered":"SPF, DKIM v\u0259 DMARC n\u0259dir? Biznes email-l\u0259rinin spam-a d\u00fc\u015fm\u0259m\u0259si \u00fc\u00e7\u00fcn \u0259sas qaydalar"},"content":{"rendered":"<p>Biznes email \u00fcnvan\u0131 \u015firk\u0259tin internetd\u0259ki etibar\u0131n\u0131n \u0259sas hiss\u0259l\u0259rind\u0259n biridir. <strong>info@domain.az<\/strong>, <strong>support@domain.az<\/strong> v\u0259 ya <strong>sales@domain.az<\/strong> kimi \u00fcnvanlar m\u00fc\u015ft\u0259riy\u0259 daha pe\u015f\u0259kar g\u00f6r\u00fcn\u00fcr, amma bu email-l\u0259rin d\u00fczg\u00fcn i\u015fl\u0259m\u0259si yaln\u0131z mailbox yaratmaqla bitmir. \u018fg\u0259r domain \u00fc\u00e7\u00fcn SPF, DKIM v\u0259 DMARC kimi autentifikasiya qaydalar\u0131 qurulmay\u0131bsa, g\u00f6nd\u0259ril\u0259n m\u0259ktublar spam-a d\u00fc\u015f\u0259, \u00fcmumiyy\u0259tl\u0259 \u00e7atmaya v\u0259 ya ba\u015fqalar\u0131 h\u0259min domain ad\u0131ndan saxta email g\u00f6nd\u0259r\u0259 bil\u0259r.<\/p>\n<p>Son ill\u0259rd\u0259 Google, Yahoo v\u0259 dig\u0259r b\u00f6y\u00fck email provayderl\u0259ri g\u00f6nd\u0259r\u0259n domenl\u0259r \u00fc\u00e7\u00fcn daha s\u0259rt t\u0259hl\u00fck\u0259sizlik t\u0259l\u0259bl\u0259ri t\u0259tbiq edir. Bu o dem\u0259kdir ki, biznes email infrastrukturu art\u0131q \u201colsa yax\u015f\u0131d\u0131r\u201d m\u0259rh\u0259l\u0259sind\u0259n \u00e7\u0131x\u0131b, real \u00e7atd\u0131r\u0131lma v\u0259 t\u0259hl\u00fck\u0259sizlik t\u0259l\u0259bin\u0259 \u00e7evrilib. BITEP kimi hosting v\u0259 domain xidm\u0259tl\u0259rind\u0259n istifad\u0259 ed\u0259n biznesl\u0259r \u00fc\u00e7\u00fcn bu m\u00f6vzunu d\u00fczg\u00fcn ba\u015fa d\u00fc\u015fm\u0259k vacibdir.<\/p>\n<h2>Email autentifikasiyas\u0131 n\u0259 \u00fc\u00e7\u00fcn laz\u0131md\u0131r?<\/h2>\n<p>Email protokolu tarix\u0259n sad\u0259 v\u0259 a\u00e7\u0131q quruldu\u011fu \u00fc\u00e7\u00fcn g\u00f6nd\u0259r\u0259n \u00fcnvan\u0131n\u0131 saxtala\u015fd\u0131rmaq texniki bax\u0131mdan \u00e7\u0259tin deyil. Y\u0259ni kims\u0259 n\u0259z\u0259ri olaraq sizin domain ad\u0131n\u0131za b\u0259nz\u0259r v\u0259 ya h\u0259tta sizin domain-d\u0259n g\u00f6nd\u0259rilmi\u015f kimi g\u00f6r\u00fcn\u0259n email haz\u0131rlaya bil\u0259r. Bu, phishing, saxta \u00f6d\u0259ni\u015f t\u0259l\u0259bl\u0259ri v\u0259 m\u00fc\u015ft\u0259ri etibar\u0131n\u0131n z\u0259d\u0259l\u0259nm\u0259si kimi riskl\u0259r yarad\u0131r.<\/p>\n<p>SPF, DKIM v\u0259 DMARC bu problemi azaltmaq \u00fc\u00e7\u00fcn birlikd\u0259 i\u015fl\u0259y\u0259n mexanizml\u0259rdir. Onlar email alan server\u0259 bel\u0259 bir sual\u0131n cavab\u0131n\u0131 verir: \u201cBu m\u0259ktubu h\u0259qiq\u0259t\u0259n bu domain g\u00f6nd\u0259rib, yoxsa kims\u0259 domain ad\u0131ndan sui-istifad\u0259 edir?\u201d Cavab n\u0259 q\u0259d\u0259r ayd\u0131n olarsa, email-in inbox-a d\u00fc\u015fm\u0259 ehtimal\u0131 da o q\u0259d\u0259r art\u0131r.<\/p>\n<p>Praktik bax\u0131mdan bu qaydalar DNS \u00fcz\u0259rind\u0259 qurulur. Y\u0259ni domain-in DNS panelind\u0259 x\u00fcsusi TXT record-lar \u0259lav\u0259 edilir. Bu record-lar email provayderiniz\u0259, hosting serveriniz\u0259 v\u0259 t\u0259hl\u00fck\u0259sizlik siyas\u0259tiniz\u0259 uy\u011fun yaz\u0131lmal\u0131d\u0131r. Yanl\u0131\u015f record is\u0259 b\u0259z\u0259n email \u00e7atd\u0131r\u0131lmas\u0131n\u0131 daha da pisl\u0259\u015fdir\u0259 bil\u0259r.<\/p>\n<h2>SPF n\u0259dir v\u0259 nec\u0259 i\u015fl\u0259yir?<\/h2>\n<p>SPF, y\u0259ni Sender Policy Framework, hans\u0131 serverl\u0259rin sizin domain ad\u0131ndan email g\u00f6nd\u0259r\u0259 bil\u0259c\u0259yini g\u00f6st\u0259rir. M\u0259s\u0259l\u0259n, email-l\u0259ri hosting serveriniz g\u00f6nd\u0259rirs\u0259, SPF record-da h\u0259min serverin IP-si v\u0259 ya provayderin g\u00f6nd\u0259rm\u0259 qaydas\u0131 g\u00f6st\u0259rilir. \u018fg\u0259r Google Workspace, Microsoft 365 v\u0259 ya ba\u015fqa mail servisi istifad\u0259 edirsinizs\u0259, onlar\u0131n SPF include qaydalar\u0131 \u0259lav\u0259 olunur.<\/p>\n<p>SPF-in \u0259sas m\u0259qs\u0259di icaz\u0259siz serverd\u0259n g\u0259l\u0259n email-l\u0259ri \u015f\u00fcbh\u0259li kimi i\u015far\u0259l\u0259m\u0259kdir. Email alan server m\u0259ktubun g\u00f6nd\u0259rildiyi IP-ni domain-in SPF record-u il\u0259 m\u00fcqayis\u0259 edir. \u018fg\u0259r uy\u011funluq varsa, m\u0259ktub SPF testind\u0259n ke\u00e7ir. Uy\u011funluq yoxdursa, email spam-a d\u00fc\u015f\u0259 v\u0259 ya r\u0259dd edil\u0259 bil\u0259r.<\/p>\n<p>SPF qurark\u0259n \u0259n \u00e7ox edil\u0259n s\u0259hv bird\u0259n \u00e7ox SPF record yaratmaqd\u0131r. Bir domain \u00fc\u00e7\u00fcn bir d\u0259n\u0259 SPF TXT record olmal\u0131d\u0131r. \u018fg\u0259r bir ne\u00e7\u0259 servis istifad\u0259 edilirs\u0259, ham\u0131s\u0131 eyni record daxilind\u0259 birl\u0259\u015fdirilm\u0259lidir. M\u0259s\u0259l\u0259n, h\u0259m hosting serveri, h\u0259m d\u0259 \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f email marketinq servisi istifad\u0259 olunursa, SPF qaydas\u0131 d\u00fc\u015f\u00fcn\u00fclm\u00fc\u015f formada yaz\u0131lmal\u0131d\u0131r.<\/p>\n<h2>DKIM n\u0259dir v\u0259 SPF-d\u0259n f\u0259rqi n\u0259dir?<\/h2>\n<p>DKIM, y\u0259ni DomainKeys Identified Mail, email-in d\u0259yi\u015fdirilm\u0259diyini v\u0259 h\u0259qiq\u0259t\u0259n domain sahibinin icaz\u0259li sistemi t\u0259r\u0259find\u0259n imzaland\u0131\u011f\u0131n\u0131 t\u0259sdiql\u0259yir. SPF daha \u00e7ox \u201chans\u0131 server g\u00f6nd\u0259r\u0259 bil\u0259r?\u201d sual\u0131na cavab verir. DKIM is\u0259 \u201cbu m\u0259ktub g\u00f6nd\u0259rildikd\u0259n sonra d\u0259yi\u015fdirilm\u0259yib v\u0259 kriptoqrafik imza do\u011frudurmu?\u201d sual\u0131n\u0131 yoxlay\u0131r.<\/p>\n<p>DKIM sistemi public\/private key prinsipi il\u0259 i\u015fl\u0259yir. Email g\u00f6nd\u0259r\u0259n sistem m\u0259ktuba gizli a\u00e7arla imza \u0259lav\u0259 edir. Domain-in DNS panelind\u0259 is\u0259 public key saxlan\u0131l\u0131r. Email alan server DNS-d\u0259n public key-i oxuyur v\u0259 imzan\u0131 yoxlay\u0131r. \u018fg\u0259r imza do\u011frudursa, email daha etibarl\u0131 q\u0259bul edilir.<\/p>\n<p>DKIM x\u00fcsusil\u0259 forward olunan email-l\u0259rd\u0259 faydal\u0131d\u0131r, \u00e7\u00fcnki b\u0259zi hallarda SPF forward zaman\u0131 u\u011fursuz ola bil\u0259r. DKIM imzas\u0131 is\u0259 m\u0259ktubun m\u0259zmunu d\u0259yi\u015fm\u0259dikc\u0259 etibarl\u0131 qal\u0131r. Buna g\u00f6r\u0259 pe\u015f\u0259kar email infrastrukturu qurulark\u0259n SPF il\u0259 kifay\u0259tl\u0259nm\u0259k d\u00fczg\u00fcn deyil, DKIM d\u0259 aktiv edilm\u0259lidir.<\/p>\n<h2>DMARC n\u0259dir v\u0259 niy\u0259 \u0259n vacib m\u0259rh\u0259l\u0259dir?<\/h2>\n<p>DMARC, y\u0259ni Domain-based Message Authentication, Reporting and Conformance, SPF v\u0259 DKIM n\u0259tic\u0259l\u0259rin\u0259 \u0259saslanaraq email alan server\u0259 n\u0259 etm\u0259li oldu\u011funu bildirir. M\u0259s\u0259l\u0259n, \u0259g\u0259r email SPF v\u0259 DKIM yoxlamas\u0131ndan ke\u00e7mirs\u0259, onu q\u0259bul etm\u0259k, spam-a atmaq v\u0259 ya tam r\u0259dd etm\u0259k siyas\u0259ti DMARC il\u0259 m\u00fc\u0259yy\u0259n edilir.<\/p>\n<p>DMARC-\u0131n ba\u015fqa vacib \u00fcst\u00fcnl\u00fcy\u00fc hesabat mexanizmidir. Domain sahibi hans\u0131 serverl\u0259rin onun ad\u0131ndan email g\u00f6nd\u0259rm\u0259y\u0259 \u00e7al\u0131\u015fd\u0131\u011f\u0131n\u0131 g\u00f6r\u0259 bil\u0259r. Bu hesabatlar say\u0259sind\u0259 saxta g\u00f6nd\u0259rm\u0259 c\u0259hdl\u0259ri, s\u0259hv konfiqurasiya olunmu\u015f servisl\u0259r v\u0259 \u00e7atd\u0131r\u0131lma probleml\u0259ri a\u015fkarlan\u0131r.<\/p>\n<p>DMARC qurark\u0259n bird\u0259n-bir\u0259 s\u0259rt <strong>reject<\/strong> siyas\u0259ti t\u0259tbiq etm\u0259k risklidir. \u018fvv\u0259lc\u0259 <strong>p=none<\/strong> il\u0259 m\u00fc\u015fahid\u0259 rejimi qurmaq, hesabatlar\u0131 analiz etm\u0259k, sonra <strong>quarantine<\/strong> v\u0259 sonda <strong>reject<\/strong> m\u0259rh\u0259l\u0259sin\u0259 ke\u00e7m\u0259k daha t\u0259hl\u00fck\u0259siz yana\u015fmad\u0131r. Bu, real biznes email ax\u0131n\u0131n\u0131 pozmadan t\u0259hl\u00fck\u0259sizliyi art\u0131rma\u011fa imkan verir.<\/p>\n<h2>Biznes saytlar\u0131 \u00fc\u00e7\u00fcn praktik konfiqurasiya yana\u015fmas\u0131<\/h2>\n<p>\u018fg\u0259r domain \u00fcz\u0259rind\u0259 h\u0259m hosting email-i, h\u0259m d\u0259 \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f servis istifad\u0259 olunursa, \u0259vv\u0259lc\u0259 b\u00fct\u00fcn g\u00f6nd\u0259rm\u0259 m\u0259nb\u0259l\u0259ri siyah\u0131ya al\u0131nmal\u0131d\u0131r. Buraya hosting serveri, CRM sistemi, newsletter platformas\u0131, invoice sistemi v\u0259 support desk daxil ola bil\u0259r. Sonra SPF record b\u00fct\u00fcn bu m\u0259nb\u0259l\u0259ri \u0259hat\u0259 ed\u0259c\u0259k formada yaz\u0131l\u0131r.<\/p>\n<p>DKIM \u00fc\u00e7\u00fcn h\u0259r email provayderinin verdiyi selector v\u0259 public key DNS-\u0259 \u0259lav\u0259 olunur. B\u0259zi provayderl\u0259r bir ne\u00e7\u0259 DKIM record t\u0259l\u0259b edir. Bu m\u0259rh\u0259l\u0259d\u0259 record ad\u0131n\u0131 s\u0259hv yazmaq \u00e7ox yay\u0131lm\u0131\u015f problemdir. Ona g\u00f6r\u0259 DNS d\u0259yi\u015fiklikl\u0259rind\u0259n sonra provayderin verification al\u0259ti il\u0259 yoxlama aparmaq laz\u0131md\u0131r.<\/p>\n<p>DMARC \u00fc\u00e7\u00fcn ba\u015flan\u011f\u0131cda hesabat q\u0259bul ed\u0259n email \u00fcnvan\u0131 t\u0259yin etm\u0259k yax\u015f\u0131d\u0131r. M\u0259s\u0259l\u0259n, t\u0259hl\u00fck\u0259sizlik v\u0259 ya admin email-i bu hesabatlar\u0131 q\u0259bul ed\u0259 bil\u0259r. Hesabatlar texniki formatda g\u0259ldiyi \u00fc\u00e7\u00fcn onlar\u0131 analiz ed\u0259n ayr\u0131ca al\u0259tl\u0259rd\u0259n istifad\u0259 etm\u0259k d\u0259 m\u00fcmk\u00fcnd\u00fcr.<\/p>\n<h2>\u018fn \u00e7ox rast g\u0259lin\u0259n s\u0259hvl\u0259r<\/h2>\n<p>Birinci s\u0259hv eyni domain \u00fc\u00e7\u00fcn iki ayr\u0131 SPF record yaratmaqd\u0131r. Bu, SPF yoxlamas\u0131n\u0131n fail olmas\u0131na s\u0259b\u0259b ola bil\u0259r. \u0130kinci s\u0259hv SPF-d\u0259 \u00e7ox geni\u015f icaz\u0259 verm\u0259kdir. M\u0259s\u0259l\u0259n, laz\u0131ms\u0131z IP aral\u0131qlar\u0131n\u0131 icaz\u0259li etm\u0259k t\u0259hl\u00fck\u0259sizlik riskini art\u0131r\u0131r.<\/p>\n<p>\u00dc\u00e7\u00fcnc\u00fc s\u0259hv DKIM-in aktiv oldu\u011funu d\u00fc\u015f\u00fcnm\u0259k, amma DNS record-u d\u00fczg\u00fcn \u0259lav\u0259 etm\u0259m\u0259kdir. B\u0259z\u0259n record \u0259lav\u0259 edilir, amma selector s\u0259hv olur v\u0259 email-l\u0259r DKIM imzas\u0131 il\u0259 ke\u00e7mir. D\u00f6rd\u00fcnc\u00fc s\u0259hv DMARC-\u0131 he\u00e7 qurmamaqd\u0131r. SPF v\u0259 DKIM olsa bel\u0259, DMARC yoxdursa, domain spoofing-\u0259 qar\u015f\u0131 siyas\u0259t z\u0259if qal\u0131r.<\/p>\n<p>Be\u015finci s\u0259hv DNS propagation m\u00fcdd\u0259tini n\u0259z\u0259r\u0259 almamaqd\u0131r. Record \u0259lav\u0259 edil\u0259nd\u0259n d\u0259rhal sonra b\u00fct\u00fcn d\u00fcnyada g\u00f6r\u00fcnm\u0259y\u0259 bil\u0259r. TTL d\u0259y\u0259rind\u0259n as\u0131l\u0131 olaraq d\u0259yi\u015fiklikl\u0259rin tam yay\u0131lmas\u0131 bir ne\u00e7\u0259 d\u0259qiq\u0259d\u0259n bir ne\u00e7\u0259 saata q\u0259d\u0259r \u00e7\u0259k\u0259 bil\u0259r.<\/p>\n<h2>N\u0259tic\u0259<\/h2>\n<p>SPF, DKIM v\u0259 DMARC biznes email-l\u0259rinin spam-a d\u00fc\u015fm\u0259m\u0259si v\u0259 domain ad\u0131ndan saxta email g\u00f6nd\u0259rilm\u0259sinin qar\u015f\u0131s\u0131n\u0131n al\u0131nmas\u0131 \u00fc\u00e7\u00fcn \u0259sas texniki qaydalard\u0131r. Bu \u00fc\u00e7 mexanizm birlikd\u0259 i\u015fl\u0259y\u0259nd\u0259 email infrastrukturu daha etibarl\u0131 olur v\u0259 m\u00fc\u015ft\u0259ril\u0259rl\u0259 kommunikasiya daha stabil apar\u0131l\u0131r.<\/p>\n<p>Domain v\u0259 hosting istifad\u0259 ed\u0259n h\u0259r biznes \u00fc\u00e7\u00fcn bu ayarlar\u0131 d\u00fczg\u00fcn qurmaq vacibdir. \u018fn yax\u015f\u0131 yana\u015fma \u0259vv\u0259l g\u00f6nd\u0259rm\u0259 m\u0259nb\u0259l\u0259rini m\u00fc\u0259yy\u0259n etm\u0259k, sonra SPF v\u0259 DKIM-i d\u00fczg\u00fcn \u0259lav\u0259 etm\u0259k, DMARC-\u0131 is\u0259 m\u00fc\u015fahid\u0259 rejimind\u0259n ba\u015flayaraq m\u0259rh\u0259l\u0259li s\u0259rtl\u0259\u015fdirm\u0259kdir.<\/p>\n<h2>M\u0259nb\u0259 v\u0259 \u0259lav\u0259 oxu<\/h2>\n<p>Google sender guidelines: https:\/\/support.google.com\/a\/answer\/81126<br \/>DMARC.org: https:\/\/dmarc.org\/<br \/>Cloudflare DNS documentation: https:\/\/developers.cloudflare.com\/dns\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Biznes email \u00fcnvan\u0131 \u015firk\u0259tin internetd\u0259ki etibar\u0131n\u0131n \u0259sas hiss\u0259l\u0259rind\u0259n biridir. info@domain.az, support@domain.az v\u0259 ya sales@domain.az kimi \u00fcnvanlar m\u00fc\u015ft\u0259riy\u0259 daha pe\u015f\u0259kar g\u00f6r\u00fcn\u00fcr, amma bu email-l\u0259rin d\u00fczg\u00fcn i\u015fl\u0259m\u0259si yaln\u0131z mailbox yaratmaqla bitmir. \u018fg\u0259r domain \u00fc\u00e7\u00fcn SPF, DKIM v\u0259 DMARC kimi autentifikasiya qaydalar\u0131 qurulmay\u0131bsa, g\u00f6nd\u0259ril\u0259n m\u0259ktublar spam-a d\u00fc\u015f\u0259, \u00fcmumiyy\u0259tl\u0259 \u00e7atmaya v\u0259 ya ba\u015fqalar\u0131 h\u0259min domain ad\u0131ndan saxta email g\u00f6nd\u0259r\u0259 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":11156,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[16,17,18],"tags":[],"class_list":["post-11157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-domain","category-hosting","category-technology"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/bitep.net\/blog\/wp-content\/uploads\/2026\/06\/spf-dkim-dmarc-nedir-biznes-email-spam-qorunma.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/comments?post=11157"}],"version-history":[{"count":0,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11157\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media\/11156"}],"wp:attachment":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media?parent=11157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/categories?post=11157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/tags?post=11157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}