When to enforce the DMARC policy to reject?

The following article covers when an organization is ready to enforce the DMARC policy. We give comprehensive guidance on how to enforce the DMARC policy and discuss whether it is always desirable to enforce the DMARC policy to reject. What DMARC policies are available and what impact do they have on email delivery? Within DMARC …

How to approach vendors with DMARC related questions?

Deploying DMARC for all domains can be a hard process. During this process a lot of sources need to be set up correctly in order to send DMARC compliant email. Some sources have documentation available on how to let their emails become DMARC compliant. However most sources do not and therefore it can be difficult …

What does DMARC compliant mean?

In this blog article we will cover what DMARC compliance is and how to become DMARC compliant. In order to fully implement DMARC, being DMARC compliant is key. What is DMARC compliance? With DMARC it is possible to gain full insight on your email channel, choose from three different DMARC policies and protect your domains …

What to do with sources failing the DMARC checks?

In this article we will cover what to do if you find sources failing the DMARC checks. You can find these sources in the per sending overview of the ‘DMARC aggregate reports’ section. Why is a source marked as failed? The reason a source is marked as failed, is because the email(s) from this source …

What does the SPF failure mean?

When aligning sources in DMARC Analyzer it’s possible that you will see several failures. But what do all these failures mean? Below we created a legenda with all possible failures. SPF SPF records can contain multiple ‘mechanisms’. These are parts of the SPF record while describe (a set of) valid sending IP addresses for this …

5 common mistakes to avoid when deploying DMARC

Deploying DMARC can be an overwhelming and complicated process. In this article we will cover the 5 common mistakes to avoid when deploying DMARC. 1. Not setting up parked (inactive) domains All companies implement DMARC for their active domains. However most companies also have parked (inactive) domains and do not implement DMARC for them. Not …

How to start with DMARC in 5 steps

Doing all above means you are in the ‘Governance’ fase. Please refer to the following article 5 steps to a DMARC reject policy for more information about all stages within a DMARC deployment project.

How should I setup parked/inactive domains?

Most companies have a set of active domains which they use to send mail from. However most of the time there are also parked (or inactive) domains. These are domains which have been registered by a customer, but which are not used to send email or host a website. This can be ‘typo domains’ or …

What is a DMARC Policy?

Available DMARC policies There are three DMARC policies you can choose of if an email fails the DMARC checks. You can choose NONE, QUARANTINE and REJECT. Monitor policy: p=none With NONE you do not want the email receiver to do anything with the emails send. The email just goes into the inbox / folder of the receiver …

I do not have a DMARC record yet

The core of a DMARC implementation is your DMARC record. This is easy to setup and necessary to use DMARC Analyzer and see which systems are sending mail on behalf of your domain. You do not have a DMARC record yet and want to start with DMARC? With help of the DMARC Record Creator you …

Can DMARC decrease the amount of spam and phishing I receive?

Yes it partially can, however you are not in control at this point. If you receive very much spam and/or phishing, you should probably take a look at a great spamfilter or contact your ISP to help you with this. DMARC is intended to reduce the amount of spam and phishing, however this is from …

Unknown sources in the DKIM aligned section

You may see sources you do not recognize in the ‘ DMARC compliant – DKIM aligned’ section. This may occur if you send DKIM signed email to these sources and the recipient has configured a forward. This would mean the original receiving server of the message will forward the message to the new destination as …

What is alignment?

DMARC is all about verifying that the address in the ‘From’ header is the actual sender of the message. To achieve this, the technical settings to verify senders DKIM and SPF are used. However, both DKIM and SPF do not require the From header and the user identity for either DKIM or SPF to match. …

How to start with DMARC?

This article provides all guidance on how to start with DMARC. One of the first steps in the DMARC deployment process is to publish a DMARC record into your DNS this in order to start collecting DMARC reports. The published DMARC record instructs ISPs to send DMARC reports. In order to start receiving DMARC reports …