Collaborate Disseminate
I am trying to get the DKIM and SPF settings correct for a client who uses both GSuite and WordPress to send her emails.
I added this dmarc: v=DMARC1; p=none; rua=mailto:l***@******ney.com; fo=1; adkim=r; aspf=r;
(when I set the p to quara… Continue reading DKIM/SPF What does it mean when policy_evaluated fails but auth_results passes?
Microsoft and GOV.UK recommend creating a record like the following on any domain that doesn’t send email.
TXT *._domainkey v=DKIM1;p=
As I understand it, the purpose is to explicitly fail DKIM, rather than leaving open the possibil… Continue reading What’s the purpose of an invalid wildcard DKIM record?
I have set up DMARC for some months now and I am using dmarc-visualizer to parse the reports.
Overall I am happy so we can advance towards BIMI, but before switching to quarantine or reject on DMARC, there is a behavior that I cannot under… Continue reading DMARC falsely reports impersonation
I have set adkim=s and aspf=s, the DMARC check on mxtoolbox.com passes all tests. However, I’m using the default DKIM from microsoft, so from my understanding DMARC should fail since the alignment check with DKIM should fail. However, it p… Continue reading Why is DMARC Passing, when it seems like there is no alignment?
Rewriting for clarity:
This is regarding emails send from a 3rd party marketer spoofing one of our email addresses in the message header from field. In these emails the envelope sender would come from "noreply@marketingfirm.example&q… Continue reading Authorizing 3rd Party Envelope Sender to Impersonate Header Sender
I am trying to figure out how this one phishing email (used our Company’s domain as from) was able to bypass the O365 Spamfilter.
Looking at the Header it looks like they passed the DKIM even though the Domain that is used differs complete… Continue reading How did the email pass DKIM?
This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC all passed.
If I’m reading this right,… Continue reading How did this paypal spoof email pass SPF, DKIM and DMARC
I am testing my mail server setup with this tool https://email-test.had.dnsops.gov/ and I am getting suspicious that the tool may not be working right.
From what I understand it reports that my alignment check fails. I do not understand wh… Continue reading Rejected because of DKIM check fail; alignment check fail
I am setting up dmarc and receiving reports.
Part of the report includes the IP address of my centos cpanel server which fails dkim and spf.
<source_ip>123.45.67.89</source_ip>
<count>1</count>
&… Continue reading Are spf and dkim necessary for a server IP address?
The domain abc.co.uk, has registered MX records, found through dig, mx1.forwardemail.net and mx2.forwardemail.net.
dig abc.co.uk MX +noall +answer
abc.co.uk. 300 IN MX 10 mx1.forwardemail.net.
abc.co.uk. 300 IN MX 20 mx2.for… Continue reading How attacker creates fake email accounts when the domain is using 3rd party email forwarding services [closed]