-
1 - thanks for considered response so quickly
Brief summary of situation. We are a small business and muggins here is responsible for IT among other things, I am no more than a knowledgeable amateur though so I just manage providers.
Exchange server based in UK and colleagues abroad use outlook client and the HTTP anywhere method to have email connectivity.
Colleague in Malaysia - emails are getting rejected as spam by a recipient company . their implementation of spamtitan is scoring my colleague'e emails 5.5 and therefore blocking them.. This is a problem as its legitimate email traffic.
Doing a bit of digging - our exchange server has SPF but not DKIM or DMARC.
So what I am trying to understand is whether getting our IT supplier to implement DKIM and DMARC solves the problem.
Enterprise gateways' spam modules can use things like SPF results (Hard Fail/Soft Fail/Temp Error/Perm Error) to dictate a certain spam score, but that is usually custom.
What is seen is that implementing DMARC (succesfully) absolutely improves deliverability, particularly at consumer ISPs.
The former CISO of HMRC wrote a public piece the other day saying how, as well as blocking over half a billion phishing emails, their deliverability of legitimate email went from 18% to 98%.
Not all enterprise gateways are checking DMARC yet, which is part of the battle. However, when they do, they can use a successful result to bypass certain spam or filtering modules.
Why do you ask?