Results 1 to 5 of 5

Thread: DMARC - Combat Email Phishing

  1. #1
    blason is offline Elite Member
    Join Date
    Sep 2011
    Posts
    251
    Rep Power
    3

    Default DMARC - Combat Email Phishing

    Hi Folks,

    Just FYI, not sure if community has already noticed this?

    Press Release: Leading Email Senders and Providers to Combat Email Phishing through DMARC.org - January 30, 2012

    See the enclosed PDF.

    Views, suggestions, ideas, lets discuss.
    Attached Files Attached Files

  2. #2
    MattStruggle is offline Infraction/Mod Queue
    Join Date
    Feb 2012
    Posts
    3
    Rep Power
    0

    Default

    Yeah, I already set my up using this DMARC Wizard

    Once you set it for your domain, you'll start getting reports from google, I haven't gotten reports from anyone else but google so far. It's been about 3 weeks now.

  3. #3
    blason is offline Elite Member
    Join Date
    Sep 2011
    Posts
    251
    Rep Power
    3

    Default

    Thats awesome Matt we all would love to hear the real world experience and of course if yo have any wiki as such?

    Also, did you notice any difference in SPAM or UCE count after integrating DMARC?

  4. #4
    MattStruggle is offline Infraction/Mod Queue
    Join Date
    Feb 2012
    Posts
    3
    Rep Power
    0

    Default

    Blason,

    From my understanding, it's only going to stop people who spoof the "From" section of the email of companies that implemented it like "paypal, bank of america, etc" so if you someone sends you an email from admin@paypal.com and paypal has DMARC records, and your mail reciever (The email software you use) then checks paypals dmarc records and the SPF and DKIM don't check out, then it kills it.

    But it won't kill emails from "admin@paypalspammer.com"

    You can always set up your dmarc records in "monitoring mode" - so you just get reports and no action is taken.

    Here's what the report from google looks like, in this report no one spoofed my domain, not that anyone would, I'm not a big national company or anything like that.

    Code:
    <?xml version="1.0" encoding="UTF-8" ?>
    <feedback>
      <report_metadata>
        <org_name>google.com</org_name>
        <email>noreply-dmarc-support@google.com</email>
        <report_id>9201154102068572318</report_id>
        <date_range>
          <begin>1330300800</begin>
          <end>1330387199</end>
        </date_range>
      </report_metadata>
      <policy_published>
        <domain>example.com</domain>
        <adkim>r</adkim>
        <aspf>r</aspf>
        <p>none</p>
        <pct>100</pct>
      </policy_published>
      <record>
        <row>
          <source_ip>xxx.xx.xx.xxx</source_ip>
          <count>2</count>
          <policy_evaluated>
            <disposition>none</disposition>
          </policy_evaluated>
        </row>
        <identities>
          <header_from>example.com</header_from>
        </identities>
        <auth_results>
          <dkim>
            <domain>example.com</domain>
            <result>pass</result>
            <human_result></human_result>
          </dkim>
          <spf>
            <domain>example.com</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
    </feedback>

  5. #5
    blason is offline Elite Member
    Join Date
    Sep 2011
    Posts
    251
    Rep Power
    3

    Default

    Understood but would like to know if you have performed or installed any specific module with zimbra, like SPF or DKIM? Or was that just publishing DMARC record for your domain and you are done?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 6
    Last Post: 07-07-2011, 03:52 AM
  2. need advice on configuring zimbra to work with fax server
    By pheonix1t in forum Administrators
    Replies: 0
    Last Post: 07-11-2007, 07:46 PM
  3. upgrade to 4.0.3 antispam does'nt work
    By lucanannipieri in forum Administrators
    Replies: 14
    Last Post: 11-07-2006, 03:56 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •