{"id":1688871,"date":"2026-06-26T09:00:52","date_gmt":"2026-06-26T07:00:52","guid":{"rendered":"https:\/\/blog.wedos.com\/?p=1688871"},"modified":"2026-06-26T09:00:56","modified_gmt":"2026-06-26T07:00:56","slug":"proc-vase-e-maily-konci-ve-spamu-zacnete-u-spf-dkim-a-dmarc","status":"publish","type":"post","link":"https:\/\/blog.wedos.com\/cs\/proc-vase-e-maily-konci-ve-spamu-zacnete-u-spf-dkim-a-dmarc","title":{"rendered":"Pro\u010d va\u0161e e-maily kon\u010d\u00ed ve spamu? Za\u010dn\u011bte u SPF, DKIM a DMARC"},"content":{"rendered":"\n<p>U VEDOS se p\u0159i \u0159e\u0161en\u00ed doru\u010dov\u00e1n\u00ed e-mail\u016f \u010dasto setk\u00e1te se zkratkami SPF, DKIM a DMARC. Zn\u00ed technicky, ale nejde o \u017e\u00e1dnou aplikaci, plugin ani samostatnou slu\u017ebu.<\/p>\n\n\n\n<p>SPF, DKIM a DMARC se nastavuj\u00ed v <a href=\"https:\/\/kb.vedos.cz\/dns-zaznamy\/\" target=\"_blank\" rel=\"noopener\">DNS z\u00e1znamech dom\u00e9ny<\/a>. Jejich prost\u0159ednictv\u00edm sv\u00e9 dom\u00e9n\u011b \u0159\u00edk\u00e1te, odkud sm\u00ed po\u0161ta odch\u00e1zet, jak se m\u00e1 ov\u011b\u0159it jej\u00ed podpis a co se m\u00e1 st\u00e1t, kdy\u017e se n\u011bkdo pokus\u00ed poslat podez\u0159el\u00fd e-mail va\u0161\u00edm jm\u00e9nem.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pro\u010d e-maily kon\u010d\u00ed ve spamu<\/h2>\n\n\n\n<p>Po\u0161lete z\u00e1kazn\u00edkovi e-mail a ten ho objev\u00ed ve spamu.<\/p>\n\n\n\n<p>U firemn\u00ed po\u0161ty to nen\u00ed nic v\u00fdjime\u010dn\u00e9ho. E-mail dnes neproch\u00e1z\u00ed jen podle toho, jestli existuje adresa p\u0159\u00edjemce. Poskytovatel\u00e9 schr\u00e1nek st\u00e1le v\u00edc \u0159e\u0161\u00ed, odkud zpr\u00e1va p\u0159i\u0161la a jestli odpov\u00edd\u00e1 nastaven\u00ed dom\u00e9ny.<\/p>\n\n\n\n<p>Pr\u00e1v\u011b tady pom\u00e1haj\u00ed SPF, DKIM a DMARC. Nejsou to kouzeln\u00e1 tla\u010d\u00edtka, kter\u00e1 zaru\u010d\u00ed doru\u010den\u00ed ka\u017ed\u00e9 zpr\u00e1vy do hlavn\u00ed slo\u017eky. Jsou to ale z\u00e1kladn\u00ed prvky d\u016fv\u011bryhodnosti dom\u00e9ny. Bez nich m\u016f\u017ee i legitimn\u00ed e-mail p\u016fsobit podez\u0159ele.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pro\u010d se to v\u016fbec \u0159e\u0161\u00ed<\/h2>\n\n\n\n<p>E-mail je technicky star\u00e1 slu\u017eba. Dlouho platilo, \u017ee do pole odes\u00edlatele \u0161lo napsat t\u00e9m\u011b\u0159 cokoliv. Toho vyu\u017e\u00edvaj\u00ed spamme\u0159i i podvodn\u00edci. Po\u0161lou zpr\u00e1vu, kter\u00e1 se tv\u00e1\u0159\u00ed jako e-mail z va\u0161\u00ed dom\u00e9ny, i kdy\u017e s v\u00e1mi nem\u00e1 nic spole\u010dn\u00e9ho.<\/p>\n\n\n\n<p>M\u016f\u017ee j\u00edt o fale\u0161nou fakturu, v\u00fdzvu k platb\u011b nebo upozorn\u011bn\u00ed na zm\u011bnu hesla. P\u0159\u00edjemce vid\u00ed zn\u00e1mou dom\u00e9nu, tak\u017ee zpr\u00e1v\u011b sn\u00e1z uv\u011b\u0159\u00ed.<\/p>\n\n\n\n<p>SPF, DKIM a DMARC pom\u00e1haj\u00ed p\u0159\u00edjemc\u016fm poznat rozd\u00edl mezi skute\u010dn\u00fdm e-mailem od v\u00e1s a zpr\u00e1vou, kter\u00e1 se za v\u00e1s jen vyd\u00e1v\u00e1.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SPF: seznam povolen\u00fdch odes\u00edlatel\u016f<\/h2>\n\n\n\n<p>SPF je DNS z\u00e1znam, ve kter\u00e9m uvedete servery opr\u00e1vn\u011bn\u00e9 pos\u00edlat e-maily za va\u0161i dom\u00e9nu.<\/p>\n\n\n\n<p>P\u0159\u00edklad: pou\u017e\u00edv\u00e1te firemn\u00ed po\u0161tu u VEDOS, ale faktury pos\u00edl\u00e1 \u00fa\u010detn\u00ed syst\u00e9m a potvrzen\u00ed objedn\u00e1vek e-shop. Pokud se v DNS po\u010d\u00edt\u00e1 jen s jedn\u00edm zdrojem, \u010d\u00e1st po\u0161ty m\u016f\u017ee za\u010d\u00edt vypadat ned\u016fv\u011bryhodn\u011b.<\/p>\n\n\n\n<p>Typickou chybou je i to, \u017ee dom\u00e9na m\u00e1 <a href=\"https:\/\/kb.vedos.cz\/maily-spf\/\" target=\"_blank\" rel=\"noopener\">v\u00edce SPF z\u00e1znam\u016f<\/a>. To nen\u00ed \u201ev\u011bt\u0161\u00ed jistota\u201c, ale probl\u00e9m. SPF m\u00e1 b\u00fdt jeden a m\u00e1 zahrnovat v\u0161echny slu\u017eby, kter\u00e9 za dom\u00e9nu skute\u010dn\u011b odes\u00edlaj\u00ed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">DKIM: podpis e-mailu<\/h2>\n\n\n\n<p>DKIM je dal\u0161\u00ed DNS nastaven\u00ed, kter\u00e9 umo\u017en\u00ed p\u0159idat ke zpr\u00e1v\u011b digit\u00e1ln\u00ed podpis. P\u0159\u00edjemce si d\u00edky n\u011bmu ov\u011b\u0159\u00ed, \u017ee e-mail podepsal opr\u00e1vn\u011bn\u00fd server a \u017ee se zpr\u00e1va cestou nezm\u011bnila.<\/p>\n\n\n\n<p>Hod\u00ed se hlavn\u011b u automatick\u00fdch zpr\u00e1v z e-shopu, formul\u00e1\u0159\u016f nebo extern\u00edch slu\u017eeb. Pokud se zm\u011bn\u00ed poskytovatel po\u0161ty, spust\u00ed se nov\u00fd syst\u00e9m nebo z\u016fstanou v DNS star\u00e9 z\u00e1znamy, DKIM m\u016f\u017ee p\u0159estat sed\u011bt. Navenek p\u0159itom e-mail norm\u00e1ln\u011b odejde. Pro spam filtr u\u017e ale m\u016f\u017ee b\u00fdt m\u00e9n\u011b d\u016fv\u011bryhodn\u00fd.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">DMARC: pravidlo pro podez\u0159el\u00e9 zpr\u00e1vy<\/h2>\n\n\n\n<p>DMARC tak\u00e9 nastavujete p\u0159es DNS. Navazuje na SPF a DKIM a \u0159\u00edk\u00e1 p\u0159\u00edjemci, co m\u00e1 d\u011blat, kdy\u017e ov\u011b\u0159en\u00ed nevyjde.<\/p>\n\n\n\n<p>Na za\u010d\u00e1tku m\u016f\u017ee jen sledovat, co se s e-maily d\u011bje. Pozd\u011bji m\u016f\u017ee doporu\u010dit, aby podez\u0159el\u00e9 zpr\u00e1vy skon\u010dily ve spamu, nebo aby je p\u0159\u00edjemce rovnou odm\u00edtl.<\/p>\n\n\n\n<p>DMARC je u\u017eite\u010dn\u00fd hlavn\u011b jako ochrana dom\u00e9ny. Pom\u00e1h\u00e1 br\u00e1nit tomu, aby n\u011bkdo pos\u00edlal fale\u0161n\u00e9 e-maily va\u0161\u00edm jm\u00e9nem. Z\u00e1rove\u0148 je pot\u0159eba nastavit ho rozumn\u011b. Kdy\u017e se nastav\u00ed p\u0159\u00edsn\u011b d\u0159\u00edv, ne\u017e m\u00e1te v po\u0159\u00e1dku SPF a DKIM, m\u016f\u017eete si t\u00edm zkomplikovat doru\u010dov\u00e1n\u00ed vlastn\u00ed po\u0161ty.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pro\u010d to nyn\u00ed lid\u00e9 \u0159e\u0161\u00ed<\/h2>\n\n\n\n<p>Velc\u00ed poskytovatel\u00e9 e-mailov\u00fdch schr\u00e1nek v posledn\u00edch letech zp\u0159\u00edsnili pravidla hlavn\u011b pro hromadnou po\u0161tu. D\u016fvod je jednoduch\u00fd: spam, phishing a podvodn\u00e9 zpr\u00e1vy jsou \u010d\u00edm d\u00e1l propracovan\u011bj\u0161\u00ed.<\/p>\n\n\n\n<p>D\u0159\u00edv pro\u0161lo ledacos. Dnes se v\u00edc sleduje, jestli m\u00e1 dom\u00e9na spr\u00e1vn\u011b nastaven\u00e9 ov\u011b\u0159en\u00ed, jestli po\u0161ta chod\u00ed ze spr\u00e1vn\u00fdch server\u016f a jestli odes\u00edlatel dlouhodob\u011b nep\u016fsob\u00ed podez\u0159ele.<\/p>\n\n\n\n<p>Proto se m\u016f\u017ee st\u00e1t, \u017ee e-maily roky fungovaly bez v\u011bt\u0161\u00edch z\u00e1sah\u016f a najednou za\u010dnou padat do spamu. Ne proto, \u017ee by se nutn\u011b zm\u011bnil obsah zpr\u00e1v, ale proto\u017ee se zp\u0159\u00edsnilo vyhodnocov\u00e1n\u00ed d\u016fv\u011bryhodnosti.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kde za\u010d\u00edt, kdy\u017e va\u0161e e-maily padaj\u00ed do spamu<\/h2>\n\n\n\n<p>Nejd\u0159\u00edv si ujasn\u011bte, odkud za va\u0161i dom\u00e9nu po\u0161ta odch\u00e1z\u00ed. Nesta\u010d\u00ed \u0159\u00edct \u201em\u00e1me e-mail u VEDOS\u201c. E-maily m\u016f\u017ee pos\u00edlat tak\u00e9 faktura\u010dn\u00ed syst\u00e9m, CRM nebo slu\u017eba pro hromadn\u00e9 rozes\u00edlky.<\/p>\n\n\n\n<p>Ka\u017ed\u00fd takov\u00fd zdroj mus\u00ed b\u00fdt v DNS nastaven\u00ed dom\u00e9ny zohledn\u011bn\u00fd. Jinak m\u016f\u017ee \u010d\u00e1st zpr\u00e1v p\u016fsobit jako po\u0161ta, kter\u00e1 se za va\u0161i dom\u00e9nu jen vyd\u00e1v\u00e1.<\/p>\n\n\n\n<p>Potom zkontrolujte SPF, DKIM a DMARC. Pokud pou\u017e\u00edv\u00e1te slu\u017eby VEDOS, praktick\u00fd postup najdete ve znalostn\u00ed b\u00e1zi: <a href=\"https:\/\/kb.vedos.cz\/maily-spf-dkim-dmarc\/\" target=\"_blank\" rel=\"noopener\">E-maily: SPF, DKIM a DMARC<\/a>.<\/p>\n\n\n\n<p>U konkr\u00e9tn\u00ed problematick\u00e9 zpr\u00e1vy se vyplat\u00ed <a href=\"https:\/\/kb.vedos.cz\/maily-blokovani\/\" target=\"_blank\" rel=\"noopener\">pod\u00edvat tak\u00e9 do jej\u00ed hlavi\u010dky<\/a>. Pr\u00e1v\u011b tam b\u00fdv\u00e1 vid\u011bt, co ovlivnilo jej\u00ed spam sk\u00f3re.<\/p>\n\n\n\n<p>Doru\u010ditelnost ovliv\u0148uje tak\u00e9 reputace odes\u00edlaj\u00edc\u00ed IP adresy, historie dom\u00e9ny, mno\u017estv\u00ed odes\u00edlan\u00fdch zpr\u00e1v, odkazy v e-mailu, p\u0159\u00edlohy nebo to, jestli p\u0159\u00edjemci va\u0161e zpr\u00e1vy \u010dtou, ma\u017eou, nebo ozna\u010duj\u00ed jako spam.<\/p>\n\n\n\n<p>Proto neexistuje jedna univerz\u00e1ln\u00ed odpov\u011b\u010f na ot\u00e1zku \u201epro\u010d to pad\u00e1 do spamu\u201c. D\u00e1 se ale za\u010d\u00edt od v\u011bc\u00ed, kter\u00e9 maj\u00ed nejv\u011bt\u0161\u00ed dopad a daj\u00ed se dob\u0159e ov\u011b\u0159it. SPF, DKIM a DMARC mezi n\u011b pat\u0159\u00ed.<\/p>\n\n\n\n<p>Kdy\u017e jsou nastaven\u00e9 spr\u00e1vn\u011b, d\u00e1v\u00e1te p\u0159\u00edjemc\u016fm jasn\u00fd sign\u00e1l: tahle zpr\u00e1va opravdu pat\u0159\u00ed k na\u0161\u00ed dom\u00e9n\u011b. A to je dnes pro doru\u010dov\u00e1n\u00ed e-mail\u016f jeden z nejd\u016fle\u017eit\u011bj\u0161\u00edch z\u00e1klad\u016f.<\/p>\n\n\n\n<p>Jak funguje ochrana p\u0159ed spamem na stran\u011b p\u0159\u00edjemce, jsme popsali v \u010dl\u00e1nku <a href=\"https:\/\/blog.wedos.com\/cs\/samoucici-se-ochrana-pred-spamem-s-umelou-inteligenci\">Samou\u010d\u00edc\u00ed se ochrana p\u0159ed spamem s um\u011blou inteligenc\u00ed<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>U VEDOS se p\u0159i \u0159e\u0161en\u00ed doru\u010dov\u00e1n\u00ed e-mail\u016f \u010dasto setk\u00e1te se zkratkami SPF, DKIM a DMARC. Zn\u00ed technicky, ale nejde o \u017e\u00e1dnou aplikaci, plugin ani samostatnou slu\u017ebu. SPF, DKIM a DMARC se nastavuj\u00ed v DNS z\u00e1znamech dom\u00e9ny. Jejich prost\u0159ednictv\u00edm sv\u00e9 dom\u00e9n\u011b \u0159\u00edk\u00e1te, odkud sm\u00ed po\u0161ta odch\u00e1zet, jak se m\u00e1 ov\u011b\u0159it jej\u00ed podpis a co se m\u00e1 &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/blog.wedos.com\/cs\/proc-vase-e-maily-konci-ve-spamu-zacnete-u-spf-dkim-a-dmarc\" class=\"more-link\">Pokra\u010dovat ve \u010dten\u00ed<span class=\"screen-reader-text\"> &#8222;Pro\u010d va\u0161e e-maily kon\u010d\u00ed ve spamu? Za\u010dn\u011bte u SPF, DKIM a DMARC&#8220;<\/span><\/a><\/p>\n","protected":false},"author":16,"featured_media":1688879,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1688871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-spolecnost"],"_links":{"self":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/1688871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/comments?post=1688871"}],"version-history":[{"count":1,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/1688871\/revisions"}],"predecessor-version":[{"id":1688891,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/1688871\/revisions\/1688891"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/media\/1688879"}],"wp:attachment":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/media?parent=1688871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/categories?post=1688871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/tags?post=1688871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}