Thoughts on DMARC?

[ass17]

Hi all,

 

We are thinking to introduce DMARC to stop email spoofing etc...

 

Do you have it setup and what are the pros/cons of DMARC for you so far?

 

Any help making a decision would be greatful!

Thanks[emoji106]🏻

[ZeroHour]

EduGeek uses DMARC. Its just another tool to help prevent spoofers and ensure your mail gets less hit by spam engines as you have implemented it correctly and tell others how to treat spoofed mail.

 

I use this: https://dmarc.postmarkapp.com/ to monitor DMARC reports to see whats going on weekly which is also very handy but you always get a few unauthenticated mails detected from spoofers (although I suspect they have been blocked/moved to spam properly on the receiver end with any luck)

Edited December 10, 2016 by ZeroHour

[ass17]

EduGeek uses DMARC. Its just another tool to help prevent spoofers and ensure your mail gets less hit by spam engines as you have implemented it correctly and tell others how to treat spoofed mail.

 

I use this: https://dmarc.postmarkapp.com/ to monitor DMARC reports to see whats going on weekly which is also very handy but you always get a few unauthenticated mails detected from spoofers (although I suspect they have been blocked/moved to spam properly on the receiver end with any luck)

Ok great thanks, and is your DMARC policy in None (Monitor) or reject or quarantine mode?

[rogerdnixon]

We have used DMARC with G Suite for the past year or so (and use with all our sub-domain primaries). Coupled with all SPAM going into admin quarantine and a few attachment rules it effectively stops a lot of exploited.

[ZeroHour]

Ok great thanks, and is your DMARC policy in None (Monitor) or reject or quarantine mode?

 

Currently None as I was using the reports to get an idea of the scale of the problem before moving towards quarantine.

[rogerdnixon]

Ok great thanks, and is your DMARC policy in None (Monitor) or reject or quarantine mode?

 

We have it set to reject.