Important reminder, if you own a domain name and don't use it for sending email.
-
@Ruaphoc
Thanks for this! This is on my list to look at this weekend. Thank you! -
[email protected]replied to Jerry Lerman on last edited by
@Jerry If I change my mind and I want to send e-mails from the domain: Can I expect that this will work, if I change the DNS records file again and wait for TTL seconds? Or will this take considerably longer?
-
Daniel, pined-lizard editionreplied to Jerry Lerman on last edited by
@Jerry Can you undo this later without consequence?
-
@daniel
Should be able to. -
Jerry Lermanreplied to [email protected] on last edited by
@nimi
Hi,Depending on the ISP, after making the changes, it usually takes up to 15 minutes for the changes to get distributed to all the DNS servers worldwide. It's pretty quick.
-
Daniel, pined-lizard editionreplied to Jerry Lerman on last edited by
@Jerry (Just thinking from a cache perspective)
-
@daniel
I've never had issues making changes, so I think it wouldn't be an issue. The caches should recognize they need updating. -
@Jerry great approach! let's consider upping the ante.
TXT "_dmarc", "v=DMARC1;p=reject;sp=reject;pct=100"
we can add
sp=reject
to cover subdomain spoofing and apct=100
to explicitly address 100% of emails. this along with your suggestions should be rock solid! -
-
-
-
@[email protected] I'm just reading this today, when a DMARC report from Yahoo has arrived at my
rua=
address. Someone failed SPF with a reverse DNS pointing to a parked domain tried to send mail from my own domain (which I also use to send mail, but with valid SPF ofc). amazing coincidence :blobfoxdetermined: -
@kristof Yeah, it seems to be getting pretty common. On this domain, this morning, I was alerted to a spoof attempt by Google. Two days ago, I got a report of an attempt to spoof another domain I have from Yahoo.