Collaborate Disseminate
I just got an email from some random person’s name “via” info@mydomain.com, although info@mydomain.com is just a distribution group within G Suite.
We have an up-to-date SPF record added from Google, and I’m not quite sure w… Continue reading Spam email "via" my domain, but SPF record exists
I read that you can write anything into the From: field of an e-mail.
If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like service@amaz0n.com instead of just using the actual service@amazon.co… Continue reading Why do phishing e-mails use faked e-mail addresses instead of the real one?
Yesterday, some spammer on the other side of the world decided to send out a ton of phishing mails with my business mail address as both From address and envelope sender.
The usual best practices are in place: My provider (a… Continue reading Is it possible to defend against a backscatter attack?
My understanding is that SPF can be used to define a set of IP addresses that are permitted to send outbound emails on behalf of a domain. If a mail server that is not included in the set of permitted IP addresses sends an em… Continue reading Can a custom return path make SPF redundant
Despite a looming deadline, over a quarter of federal agencies are still not using basic email security tools. ` Continue reading DMARC Compliance Lacking in 28 Percent of .Gov Agencies
I’ve made an SPF Record for my company domain and I took great carefulness to have it done properly without any errors.
I’ve also set up our mailgateway to check SPF Records of all incoming emails from 3rd parties.
The mai… Continue reading Does error checking for SPF Records make sense?
I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc..
v=spf1 +ip4:xxx.xxx.xxx.xxx incl… Continue reading Is it safe to add IP address to SPF record
My website is up and running on www.example.com and I am sending automated emails from my email address support@example.com. DMARC and SPF seem to setup accordingly:
_dmarc : v=DMARC1;p=none;pct=100;rua=mailto:support@example.com;ruf=mail… Continue reading DMARC and SPF are setup for my non-www domain but doesn’t work for www
An SPF record has several tags of which one can be the include tag, and the SPF record ends with a quantifier like +, ?, ~ or -.
When an include tag is used, the included SPF record has it’s own SPF quantifier. Let’s call t… Continue reading Which SPF quantifier applies when an SPF include is used?
Does a SPF record apply only on the domain it’s setup for or also for all it’s subdomains?
For example an SPF record that is configured for the domain example.com will set the policy for mails ending with @example.com.
So if that is the… Continue reading Do SPF records apply to all subdomains?