Collaborate Disseminate
Lets say we have this SPF record
v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all`
And this record
v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all
What would be the difference ?
Would record1 ac… Continue reading SPF records and spoofing
I am testing my mail server setup with this tool https://email-test.had.dnsops.gov/ and I am getting suspicious that the tool may not be working right.
From what I understand it reports that my alignment check fails. I do not understand wh… Continue reading Rejected because of DKIM check fail; alignment check fail
I have the following SPF record:
v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all
Although I have included _spf.mailspamprotection.com in my SPF record, which includes ip4:146.66.121.0/24, I get … Continue reading Unknown Cause of SPF Fail
I got an email with the following:
I am just looking at your SPF records then found following. SPF Records missing safe check which can allow me to send mail and phish easily any victim.
PoC:
<?php
$to = "VICTIM@example.com"… Continue reading Vulnerability : Missing SPF – is this a scam?
I am setting up dmarc and receiving reports.
Part of the report includes the IP address of my centos cpanel server which fails dkim and spf.
<source_ip>123.45.67.89</source_ip>
<count>1</count>
&… Continue reading Are spf and dkim necessary for a server IP address?
I can’t seem to find any record of SPF or DMARC in the original messages coming from gmail to my mail server.
Does gmail use SPF or DMARC when sending messages outside of gmail?
Continue reading Does gmail use SPF or DMARC when sending messages outside of gmail?
The domain abc.co.uk, has registered MX records, found through dig, mx1.forwardemail.net and mx2.forwardemail.net.
dig abc.co.uk MX +noall +answer
abc.co.uk. 300 IN MX 10 mx1.forwardemail.net.
abc.co.uk. 300 IN MX 20 mx2.for… Continue reading How attacker creates fake email accounts when the domain is using 3rd party email forwarding services [closed]
Firstly, i’m not a mail expert! My workplace owns the domain example.com, until recently we had an application hosted on the LAN that worked fine and sent emails from info@example.com to various internal and external recipients using smtp … Continue reading Sending Mail from Different Server SPF Record
Under this FAQ it says that using policy=none is a way for domain owners to monitor forged emails, without having to set up SPF/DKIM. But what im wondering, because i dont fully understand what SPF/DKIM itself does, is: What is the point o… Continue reading What is the point of having SPF and DKIM set up, but having DMARC with policy=none?
I recently received several emails from a security researcher, one for each "vulnerability" that he had discovered on my website. These alleged vulnerabilities were respectively: a missing certificate authority, no valid SPF, and… Continue reading Dealing with an independent security researcher [closed]