How to get email forwarders DMARC compliant?

Email forwarding within DMARC is a bit of an edgecase. What are forwarders? There are two types of forwarding, manual forwarding and automatic forwarding. Manual forwarding does not give any authentication issues, automatic forwarding does. Can forwarders be influenced? It is not possible to stop sources from forwarding emails. Once an email is sent, it …

Multiple SPF records/entries the complete guide

A domain name can’t have multiple SPF records. If you would like to add more sources (for more applications) you’ll need to update the existing record or (if the record does not exist yet) create a new record with multiple entries. How to create an SPF record with multiple sources You can add multiple sources …

What is a DKIM selector?

When trying to verify a DKIM record check – it will automatically ask for the DKIM selector. In this article we’ll explain what is a DKIM selector. What is DKIM? DKIM is an email authentication technique which organizations use to protect their email. Find more information about what is DKIM on our website. What is …

Top 10 frequently asked questions

As one of the pioneers of DMARC, DMARC Analyzer has been active in the DMARC landscape since the creation of the DMARC (RFC) standard. During these years we experienced that some questions about DMARC got asked a lot. Based on this we have written several articles, in this article we refer to articles which get …

Email authentication results explained

The DMARC Analyzer Suite provides many email authentication results. The authentication results occur in multiple overviews within the DMARC Analyzer Suite, so it’s valuable to fully understand these results. This article we will describe how DMARC Analyzer divides all collected authentication results into 8 different columns: Domain, Reason, Compliant?, Forwarded?, Volume, Applied Policy, DKIM Verification …

DKIM, SPF and DMARC – brief explanation on why implementing them provides the best email protection

Before addressing how DMARC is set up for a domain, it’s important to have a clear understanding why DMARC is vital for email security and how it’s connected to SPF and DKIM. Most organizations have some sort of inbound security enabled for their company. These tools protect incoming emails and filter messages containing spam and/or …

Why are DMARC compatible sources sending out email on my behalf?

Organizations often see DMARC compatible sources sending out a small amount of email on their behalf, while they do not use this source. In this article we will explain what is going on in these specific situations and what can be done to resolve this. What are DMARC compatible sources? When logged in to the …

How to validate your SPF record

validate your SPF record using the SPF Record Checker   learn how to create an SPF record If an SPF record is found, you will see a screen similar to the screenshot below: Please make sure the SPF record doesn’t exceed the maximum of 10 lookups! The SPF records are correctly configured when: The page …

How to validate a DKIM record

validate your DKIM record using the DKIM Record Checker   Troubleshoot the DKIM record implementation If the selector is not valid, please check with your hosting provider if the records are entered correctly in your Domain Name Server (DNS). Using the command-line tool dig in OSX and Linux, you can debug some more to try and figure …

How to choose the right DMARC Policy to protect your email channel

With almost 5 billion email accounts worldwide, there’s no channel with a wider reach than the email channel. This ensures that cyber criminals like to use this channel for malicious purposes. Despite the fact that better security measures have been taken to protect this channel in recent years, the crime on this channel is increasing …

How DMARC can improve email deliverability and domain reputation

Can DMARC improve my email deliverability? Will my domain reputation improve by placing a DMARC record? In this article we will answer these questions. What is DMARC? DMARC (Domain-based Message Authentication Reporting and Conformance) is an email validation system designed to protect domains from being used for email spoofing, phishing scams and other cybercrimes. DMARC …

How to align your email with DMARC

Organizations often get sources reported back to them in the DMARC reports which fail the DMARC checks. In this article we will explain how to setup DMARC for these ‘not compliant’ sources. How to get insight into your email channel? When a DMARC record is placed within the DNS, ISPs who have adopted DMARC will …

Usage of discussion lists and DMARC

Discussion lists can pose a ‘challenge’ while implementing DMARC. The reason for this is that discussion lists typically distribute the message to the list members. In doing so, impersonating the initial sender of the message. While this is (and has been for a long time) the intended workflow for discussion lists, this can introduce issues …

When to enforce the DMARC policy to reject?

The following article covers when an organization is ready to enforce the DMARC policy. We give comprehensive guidance on how to enforce the DMARC policy and discuss whether it is always desirable to enforce the DMARC policy to reject. What DMARC policies are available and what impact do they have on email delivery? Within DMARC …