You are reading a single comment by @fidbod and its replies. Click here to read the full conversation.
  • Enterprise gateways' spam modules can use things like SPF results (Hard Fail/Soft Fail/Temp Error/Perm Error) to dictate a certain spam score, but that is usually custom.

    What is seen is that implementing DMARC (succesfully) absolutely improves deliverability, particularly at consumer ISPs.

    The former CISO of HMRC wrote a public piece the other day saying how, as well as blocking over half a billion phishing emails, their deliverability of legitimate email went from 18% to 98%.

    Not all enterprise gateways are checking DMARC yet, which is part of the battle. However, when they do, they can use a successful result to bypass certain spam or filtering modules.

    Why do you ask?

  • 1 - thanks for considered response so quickly

    Brief summary of situation. We are a small business and muggins here is responsible for IT among other things, I am no more than a knowledgeable amateur though so I just manage providers.

    Exchange server based in UK and colleagues abroad use outlook client and the HTTP anywhere method to have email connectivity.

    Colleague in Malaysia - emails are getting rejected as spam by a recipient company . their implementation of spamtitan is scoring my colleague'e emails 5.5 and therefore blocking them.. This is a problem as its legitimate email traffic.

    Doing a bit of digging - our exchange server has SPF but not DKIM or DMARC.

    So what I am trying to understand is whether getting our IT supplier to implement DKIM and DMARC solves the problem.

  • They should certainly be able to set up DKIM for you, which can't hurt. But not if it's Exchange on prem as it's not supported.

    I doubt they will offer to "do DMARC" beyond adding a p=none policy to DNS as that involves dealing with third parties and everything else.

About

Avatar for fidbod @fidbod started