Billy Dunn
Book 15 minutes with me. You leave with my cell.
Email authentication for Dallas-Fort Worth businesses
A fake invoice with your name on it should meet more than a spam filter.Someone faked your invoice email. Their mail servers turned it away.
We configure SPF, DKIM and DMARC so receiving mail systems can check which messages are really yours. Then we take the policy to enforcement. Start with a free email spoofing check.
We publish the records that prove which mail is really yours.
A customer gets an invoice from your company. Right logo, new bank details. They pay it. Three records on your domain (SPF, DKIM and DMARC) let the receiving mail system tell that message was never yours. We publish them properly and take the policy to enforcement.
Not sure who can send as you? Call (817) 265-5000.
Free email spoofing check
Your office
Jack, your BDunn tech
Setting your domain to reject forgeries
Billy Dunn
Founder since 1989. Book 15 minutes with me and you leave with my cell.
Three records make your domain hard to fake.
SPF, DKIM and DMARC.
Taken all the way to enforcement.
Most domains stall at none.
A project, not a subscription.
For our clients, it gets done.
The DMARC ladder: from watching to enforcement
The DMARC ladder: from watching to enforcement
- 1. None Monitor authentication reports without asking receivers to block failing mail. The right place to start, the wrong place to stop.
- 2. Quarantine Ask receivers to treat failing mail as suspicious, once the reports say it is safe.
- 3. Reject Ask receivers to reject failing mail. Getting here safely is the actual work.
What the job involves
Find everything that sends as you.
The mail platform, the accounting package, the scheduling tool, the copier. Never written down anywhere.
Put the three in place.
SPF lists who may send for you. DKIM signs each message in each system that sends it. DMARC passes when SPF or DKIM passes with a domain aligned to the From line your customer reads. We configure both so your legitimate mail has the strongest chance of passing.
Keep SPF inside its limit.
SPF allows ten checks that each need a DNS lookup, including the ones inside your vendors’ records. A record that grew a vendor at a time blows past that and starts failing quietly.
Read the reports.
They show who is really sending as you, so the forgotten vendor turns up before the policy blocks it.
2 more steps
Tighten the policy in steps.
First monitor, then request quarantine, then rejection, once legitimate senders are working. The receiving system makes the final delivery decision. Forwarded mail gets tested on the way.
Write it down.
What each record is and which system it exists for.
A policy of none is a starting point.
A DMARC policy of none does not ask receivers to block fakes, so they can still get through.
We find records still sitting on none years after they went in. Getting to reject is the actual work.
For our clients, a project, not a subscription.
For our clients, a project, not a subscription.
The records go in.
Every legitimate sender accounted for.
The policy moves up.
One step at a time.
Keep it current.
When a vendor starts sending as you, we check its authentication, update the records as needed and watch the results. That is part of looking after your IT.
Check your domain right now.
SPF, DKIM and DMARC, read straight from the public records and put in plain English. Free, no sign-up.
How to read your results GoodWorth a lookProblemCouldn’t tell
- Good
- This check found what it was looking for.
- Worth a look
- Something is missing, unclear or could be better. A good question to ask whoever looks after it.
- Problem
- A specific gap the check saw, or one you told us about. Worth acting on soon.
- Couldn’t tell
- The check could not see enough to say. That is not good or bad news.
We help other mail systems spot fakes in your name.
What clients say
Great company if you want to protect your computer systems and keep them running and up to date. Fast response, easy to communicate with and overall great service.
Every review on Google: five stars.
Could someone send an invoice as you?
Free email spoofing check. Send us your domain and we’ll read its SPF and DMARC records and tell you where the gaps are that make faking your email easier. Forward us one email you sent and we’ll check DKIM too.
Already have someone doing your IT? Ask anyway.
Or Email us.
Got it.
Billy reads these himself. During office hours, we usually reply within an hour.
Need it faster? Call (817) 265-5000.
Rather talk it through?
Book 15 minutes with BillyPreview copy: nothing was sent.