3 ms·
Email security enforcement is not turned on automatically, but is relatively easy to set up for GSuite or Office365. Typically the easiest implementation is to
by twunde 7y ago
Email security enforcement is not turned on automatically, but is relatively easy to set up for GSuite or Office365. Typically the easiest implementation is to create a DNS validation record. With that caveat, SPF and DKIM are easier to setup, because it's just creating a validation record. DMARC typically means that you're now getting 10-20 emails a day from major email providers all containing XML files that need to be analyzed. There aren't a ton of good solutions to analyze the contents of the XML files
- toast0 7y agoI set up dmarc some years ago. The xml files are kind of a pain, but you really only need to look at them for a couple days or weeks, then you can remove the reporting address from your dmarc record, because once you're convinced the config is correct, there is no actionable information in the reports.
- medmunds 7y agoPostmark has a free service that will handle the DMARC XML analysis for you, sending you a human-readable summary report once a week. (You don't have to be sending through Postmark to use it; I've been surprised at how many spammers attempt to spoof my personal domains.) http://dmarc.postmarkapp.com/ http://dmarc.postmarkapp.com/
- JetSpiegel 7y agoI can recommend DMARCIAN, it's free for low volume (100k messages per month) domains. They even have a special GDPR-proof site for EU domains. https://dmarcian.com/pricing/ https://dmarcian.com/pricing/