Email, domains and DNS
Stop email spoofing (SPF, DKIM and DMARC)
Anyone can send an email that claims to come from your domain unless your DNS says otherwise. SPF, DKIM and DMARC are the three records that fix this. I find every service that sends mail as you, set the records up so real mail still arrives, and then move DMARC step by step until fake mail is rejected.
Request this$155 an hour. Every setup is different, so I quote after a short call.
What is included
- A list of every service that sends mail as your domain (email, invoicing, CRM, newsletters, scanners)
- An SPF record that stays within the technical limits
- DKIM signing in Microsoft 365 or Google Workspace
- DMARC reporting, then a staged move from monitoring to quarantine to reject over a few weeks
- Protection for domains you own but do not send mail from
- Optional MTA-STS and TLS reporting for encrypted delivery
- Checking real messages to confirm everything passes
What you get at the end
- Verified SPF, DKIM and DMARC records
- DMARC at reject (or the level we agree), with reports going to a mailbox you check
- A short list of every approved sending service and its status
What I need from you
- Admin access to Microsoft 365 or Google Workspace
- Access to your DNS
- Names of the tools you use that send email
Not included
- Monthly DMARC report monitoring after the project
- Changing email providers
Ready to get this done?
Answer a few quick questions and book a short call. I will come prepared with a plan and an estimate.