Collaborate Disseminate
Microsoft and GOV.UK recommend creating a record like the following on any domain that doesn’t send email.
TXT *._domainkey v=DKIM1;p=
As I understand it, the purpose is to explicitly fail DKIM, rather than leaving open the possibil… Continue reading What’s the purpose of an invalid wildcard DKIM record?
I have set up DMARC for some months now and I am using dmarc-visualizer to parse the reports.
Overall I am happy so we can advance towards BIMI, but before switching to quarantine or reject on DMARC, there is a behavior that I cannot under… Continue reading DMARC falsely reports impersonation
I have set adkim=s and aspf=s, the DMARC check on mxtoolbox.com passes all tests. However, I’m using the default DKIM from microsoft, so from my understanding DMARC should fail since the alignment check with DKIM should fail. However, it p… Continue reading Why is DMARC Passing, when it seems like there is no alignment?
Rewriting for clarity:
This is regarding emails send from a 3rd party marketer spoofing one of our email addresses in the message header from field. In these emails the envelope sender would come from "noreply@marketingfirm.example&q… Continue reading Authorizing 3rd Party Envelope Sender to Impersonate Header Sender
I am trying to figure out how this one phishing email (used our Company’s domain as from) was able to bypass the O365 Spamfilter.
Looking at the Header it looks like they passed the DKIM even though the Domain that is used differs complete… Continue reading How did the email pass DKIM?
This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC all passed.
If I’m reading this right,… Continue reading How did this paypal spoof email pass SPF, DKIM and DMARC
I am testing my mail server setup with this tool https://email-test.had.dnsops.gov/ and I am getting suspicious that the tool may not be working right.
From what I understand it reports that my alignment check fails. I do not understand wh… Continue reading Rejected because of DKIM check fail; alignment check fail
I am setting up dmarc and receiving reports.
Part of the report includes the IP address of my centos cpanel server which fails dkim and spf.
<source_ip>123.45.67.89</source_ip>
<count>1</count>
&… Continue reading Are spf and dkim necessary for a server IP address?
The domain abc.co.uk, has registered MX records, found through dig, mx1.forwardemail.net and mx2.forwardemail.net.
dig abc.co.uk MX +noall +answer
abc.co.uk. 300 IN MX 10 mx1.forwardemail.net.
abc.co.uk. 300 IN MX 20 mx2.for… Continue reading How attacker creates fake email accounts when the domain is using 3rd party email forwarding services [closed]
Under this FAQ it says that using policy=none is a way for domain owners to monitor forged emails, without having to set up SPF/DKIM. But what im wondering, because i dont fully understand what SPF/DKIM itself does, is: What is the point o… Continue reading What is the point of having SPF and DKIM set up, but having DMARC with policy=none?