Skip to content
MSTMail Security ToolsField guide · Omaha

Directory / Guides

Guides

Three notes on the records themselves. They cite the RFCs and the vendor setup pages. They are not rankings, and they do not invent a count of attacks.

  1. 01How to set up DMARC (step by step)Publish one SPF record and DKIM first. Then a DMARC record at p=none, read the reports, and only then move to quarantine and reject.
  2. 02SPF vs DKIM vs DMARC explainedSPF lists who may send. DKIM signs the message. DMARC checks that one of them matches the From address and tells receivers what to do on failure.
  3. 03Is my email domain being spoofed? How to tellRead Authentication-Results on a real message and, if you asked for them, the DMARC reports. A DNS lookup alone does not prove an attack today.