Skip to content

Phils Blog and Stuff

TELECOMS. VIRTUALIZATION. IT. CODING. and more…

Menu
  • Home
  • Resources
    • Subnet Mask Cheat Sheet
    • Easy Dmarc+Email
    • MX Tool Box
    • LOAD BALANCING & SRE
  • SHOP
  • SOLUTIONS
  • SERVICES
  • Contact Me
Menu

The importance of setting up email security correctly.

Posted on 17/03/202314/03/2023 by Phil

Below is why having properly configured email SPF, DMARC, DKIM Records is so important.

I have my domain set up with all the relevant DNS entries. This means that the receiving person can be sure that the email came from me.

The below is a DMRC report you get when emails are received by servers that support sending a report back. This report tells the sender how the server handled your email.

The below shows that someone on the internet was trying to send emails pretending to be from me. Due to correctly configured SPF, DMARC and DKIM. These email where blocked and so protected the receiver from what was possibly a spoofed email.

I have a post here about setting up Email records correctly : Setting up SPF DMARC BIMI DKIM for email

<?xml version="1.0"?>
<feedback>
	<version>0.1</version>
	<report_metadata>
		<org_name>XXXXXXXXXXXXXXX</org_name>
		<email>postmaster@XXXXXXX.com</email>
		<report_id>XXXXXXXXXXX</report_id>
		<date_range>
			<begin>XXXXXXXXX</begin>
			<end>XXXXXXXXX</end>
		</date_range>
	</report_metadata>
	<policy_published>
		<domain>phillip-cooper.co.uk</domain>
		<adkim>r</adkim>
		<aspf>r</aspf>
		<p>reject</p>
		<sp>reject</sp>
		<pct>100</pct>
		<fo>1</fo>
	</policy_published>
	<record>
		<row>
			<source_ip>91.220.42.227</source_ip>
			<count>1</count>
			<policy_evaluated>
				<disposition>reject</disposition>
				<dkim>fail</dkim>
				<spf>fail</spf>
			</policy_evaluated>
		</row>
		<identifiers>
			<envelope_from>phillip-cooper.co.uk</envelope_from>
			<header_from>phillip-cooper.co.uk</header_from>
		</identifiers>
		<auth_results>
			<spf>
				<domain>phillip-cooper.co.uk</domain>
				<result>fail</result>
			</spf>
		</auth_results>
	</record>
	<record>
		<row>
			<source_ip>195.130.217.221</source_ip>
			<count>1</count>
			<policy_evaluated>
				<disposition>reject</disposition>
				<dkim>fail</dkim>
				<spf>fail</spf>
			</policy_evaluated>
		</row>
		<identifiers>
			<envelope_from>phillip-cooper.co.uk</envelope_from>
			<header_from>phillip-cooper.co.uk</header_from>
		</identifiers>
		<auth_results>
			<spf>
				<domain>phillip-cooper.co.uk</domain>
				<result>fail</result>
			</spf>
		</auth_results>
	</record>
</feedback>

POSTS

  • Home Assistant. Add water meter with PHP+MQTT+YML.
  • Automating your home with Home Assistant. Initial install and config (Hyper-V).
  • The importance of setting up email security correctly.
  • Automate Debian installations with Seed, DHCP and Nginx.
  • A simple link shortener.. Fun little project…

WORD CLOUD

3CX 3CX Phone System Apache Asterisk Cacti CentOS CRM DHCP DNS Email Fail over Failover File System Firewall FreeBSD FreeNAS FXO IAX install IP IP PBX Linux M0n0wall Nottingham Open Source PBX PFSense PHP Router Server SIP snom SSH TrixBox ubuntu VLAN Voice VoIP VPN vyatta WAN Website WiFi yealink ZFS

© 2025 Phils Blog and Stuff | Powered by Superbs Personal Blog theme