Physical Address

304 North Cardinal St.
Dorchester Center, MA 02124

Email security: SPF,DKIM, DMARC, DNSSEC, TLSA and DANE

Outbound security
It is strongly recomended to send emails from an organisation which are implemented security features like SPF,DKIM and DMARC.

On top of that you can use also security features like DNSSEC, TLSA and DANE to prevent that other not authorized senders can send an email from your organization.

Inbound security
For incoming emails you can use Anti-Spam, Anti-Phishing, Safe Attachments and Safe Links). The filters exclude emails by “URL malicious reputation”

Microsoft 365 Anti-Spam
In Microsoft 365 Anti-Spam you can use the “URL Malicious Reputation” functionality to detect malicious or harmful links in e-mails and block it. This happend by realtime scanning, reputation controles and sandbox-tests (URL-detonation). Malicious URLs lead to actions such as quarantines, warnings, or blocks. Features like Safe Links give users extra protection, and the reputation database is continuously updated to catch new threats.

DKIM
DKIM plays an important role in the email process; This allows us to see that the email actually comes from the domain. This also gives us the opportunity, as is now done, to have a domain labeled as ‘non-spam’ by our filters after checking for DMARC (and therefore also DKIM). But with all security checks.

https://internet.nl

whitelisten emails

anti spam

allow


whitelisten of blocken
threath policies
tenant allow/block list
block domains
block url


header uit een email halen
originele email gebruiken
dubbel klik
file
properties
onderin internet header
kopieren
plakken in mxtoolbox site

owa
rechter muis
view
message details
dat is de header

mxtoolbox.com
analyze header
plak de header

Authentication-Results is het belangerijkst
dkim pass
dmarc pass (must have) (dmarc pass krijg je indien dkim/spf ook passed is)
spf pass

transport rule
indien Authentication-Results

SCL (Spam confidence level) = -1 betekend is geen spam

internet.nl/mail/klm.com
email test

mxtoolbox.com
dmarc lookup
indien niet dkim/spf
p=querantaine

cargonaut.nl

dkim is een private en public key
ik maak een email met een private key om onze email te assignen (kun je niet spoofen), ontvanger kan hem met de public key

Leave a Reply

Your email address will not be published. Required fields are marked *