Collaborate Disseminate
Let’s say:
alice@example.com sends an email to bob@bob.com.
Bob owns the domain bob.com but doesn’t manage an emailing server. Instead he uses an email forwarding service (provided by his registrar / DNS service, for example Cloudflare d… Continue reading How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?
Despite setting up strict DMARC, SPF, and having DKIM enabled, I am still easily able to spoof the "From" address. I can easily do this with PHPMailer on my Mac and even with some free 3rd party tools like
https://emkei.cz/
http… Continue reading Still able to spoof emails with strict DMARC, SPF and DKIM enabled
A couple times recently I’ve had a department in our organization ask to implement a vendor product that involves sending email on our behalf.
In both cases these messages only go to our own users on our own domain email accounts, and also… Continue reading Vendor SPF records with large blocks of IPs
I have quite a few questions about email security on my custom domains (SPF, DKIM, DMARC,… etc).
Let me start with Why this email got forwarded successfully, please allow an image for the words, an XML report you find below.
I simply… Continue reading Spoofed forwarded email? Help with analyzing of DMARC report
Why did this email get forwarded successfully? An XML report is below:
I simply cannot understand the delivery status, a transcript follows:
This email has been automatically forwarded. Despite the fact that DMARC has failed, the email w… Continue reading Spoofed forwarded email? Help with analyzing of DMARC report
When I send an email from my HostGator account to my Gmail account, I see in the header spf=pass…
When I paste the header in this tool -> https://toolbox.googleapps.com/apps/messageheader/
It shows SPF: pass with IP 162.241.136.65 and… Continue reading SPF passes but in Gmail, ‘Show Original’, top section doesn’t show SPF: PASS with IP
The spf record for my domain is:
v=spf1 a:smtp.(my-isp).com ip4:(my-static-IP) -all
I have recently added smtp.(my-isp).com to the spf record.
I have sent some test emails to gmail where the outgoing SMTP server was smtp.(my-isp).com but … Continue reading SPF problems using my ISP’s SMTP out-bound server
First up, git has been audited. This was an effort sponsored by the Open Source Technology Improvement Fund (OSTIF), a non-profit working to improve the security of Open Source projects. …read more Continue reading This Week in Security: Git Deep Dive, Mailchimp, and SPF
My relative received an email from a bill they were expecting to pay. So they paid said bill.
Only problem is: it was a spoofed email, and the real bill only came in later.
I checked the email on the email platform (Outlook) and there was … Continue reading Spoofed email: whose fault is it?
I’m trying to understand how SPF and DKIM can be used to prevent email spoofing. One of the things I find confusing is that the SSID/AUID of a DKIM signed message can be different from both the envelope From and header From.
For example:
S… Continue reading How do SPF and DKIM work together prevent spoofing?