The importance of setting up email security correctly.

Below is why having properly configured email SPF, DMARC, DKIM Records is so important.

I have my domain set up with all the relevant DNS entries. This means that the receiving person can be sure that the email came from me.

The below is a DMRC report you get when emails are received by servers that support sending a report back. This report tells the sender how the server handled your email.

The below shows that someone on the internet was trying to send emails pretending to be from me. Due to correctly configured SPF, DMARC and DKIM. These email where blocked and so protected the receiver from what was possibly a spoofed email.

I have a post here about setting up Email records correctly : Setting up SPF DMARC BIMI DKIM for email

<?xml version="1.0"?>
<feedback>
	<version>0.1</version>
	<report_metadata>
		<org_name>XXXXXXXXXXXXXXX</org_name>
		<email>postmaster@XXXXXXX.com</email>
		<report_id>XXXXXXXXXXX</report_id>
		<date_range>
			<begin>XXXXXXXXX</begin>
			<end>XXXXXXXXX</end>
		</date_range>
	</report_metadata>
	<policy_published>
		<domain>phillip-cooper.co.uk</domain>
		<adkim>r</adkim>
		<aspf>r</aspf>
		<p>reject</p>
		<sp>reject</sp>
		<pct>100</pct>
		<fo>1</fo>
	</policy_published>
	<record>
		<row>
			<source_ip>91.220.42.227</source_ip>
			<count>1</count>
			<policy_evaluated>
				<disposition>reject</disposition>
				<dkim>fail</dkim>
				<spf>fail</spf>
			</policy_evaluated>
		</row>
		<identifiers>
			<envelope_from>phillip-cooper.co.uk</envelope_from>
			<header_from>phillip-cooper.co.uk</header_from>
		</identifiers>
		<auth_results>
			<spf>
				<domain>phillip-cooper.co.uk</domain>
				<result>fail</result>
			</spf>
		</auth_results>
	</record>
	<record>
		<row>
			<source_ip>195.130.217.221</source_ip>
			<count>1</count>
			<policy_evaluated>
				<disposition>reject</disposition>
				<dkim>fail</dkim>
				<spf>fail</spf>
			</policy_evaluated>
		</row>
		<identifiers>
			<envelope_from>phillip-cooper.co.uk</envelope_from>
			<header_from>phillip-cooper.co.uk</header_from>
		</identifiers>
		<auth_results>
			<spf>
				<domain>phillip-cooper.co.uk</domain>
				<result>fail</result>
			</spf>
		</auth_results>
	</record>
</feedback>