Today i am releasing a DMARC implementation guide that covers full implementation flow , best practices and common mistakes of a DMARC implementation. The Implementation guide also shows a new attacks abusing EAI (Link to post) to bypass DMARC and how to combat this. This guide will take email security for your domain to a higher level where it becomes…
Do you recognize that a lot of times when you search for tools on the internet they are either paid, don`t tell you the entire story, or are hosted by companies trying to market their product and sell you a service. Due to all these issues I started to build new tools to serve the community. I present the first…
We are now 5 years in sinds the draft version of DMARC in 31-03-2013. Where is DMARC standing today and what is the adaptation rate? In part 1-3 of the anti-spam countermeasures explained we talked about the more common and known protocols to fight phishing and spam. As there were still a lot of gaps in successfully fighting phishing and…
On week 3 of the script update month I am releasing a major code update to the Create-DMARC report script. In this release of the DMARC Report tool I am adding a lot of new major functionalities, some minor functionality’s and a few bug fixes. The biggest improvement is the support for the most wanted PowerBI integration so next to…
On 27 December 2017 Microsoft announced that the support for EAI in email has been implemented. This means that the Microsoft cloud now supports EAI email addresses in outlook, email flow, connectors and rules. For now there won’t be any support for adding IDN domains to the platform itself. With this new functionality in Office 365 a new door opens…
Today I am releasing the DMARC monitoring tool to the community. It has been in development over the pas few weeks and is now ready to be used. This Report tool will give you detailed insight into domains that are trying to spoof your owned domains, subdomains or even non existing brand names. As this can cause damage to your…
Many customers I visit ask me: Do you know a good tool to generate DMARC reports? And the answer is always the same: Sorry I don’t know a end to end report generation tool that will meet your needs. There are some paid services where you can outsource this but they are pretty expensive and you lose control of the…
When I am in the field and I talk to email administrators most of them know what SPF is, but when we are talking about DKIM ( Domain Keys Identified Mail ) it seems that only the bigger company’s have implemented this protocol. Most of the time it was not the companies choice to implement DKIM but it came from a requirement enforced by a…
Antispam counter measures explained Part 1: How the Sender Policy Framework really works Antispam counter measures explained Part 2: Advanced SPF records, Best practice and biggest mistakes Antispam counter measures explained Part 3: How DKIM really works and best practice In Part 1 I explained the basics of SPF and how you can implement the most common scenario`s. After the…