EmailDiscussions.com  

Go Back   EmailDiscussions.com > Email Service Provider-specific Forums > Runbox Forum
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
Stay in touch wirelessly

Runbox Forum Everything related to Runbox should go here: suggestions, comments, complaints, questions, technical issues, etc.

Reply
 
Thread Tools
Old 18 Mar 2017, 01:46 AM   #1
adam1991
Senior Member
 
Join Date: Dec 2009
Posts: 104
I've never heard of DMARC

http://www.zdnet.com/article/making-...ce-tech-chief/

That's interesting. Is this a realistic tool for a provider like Runbox?
adam1991 is offline   Reply With Quote

Old 18 Mar 2017, 06:45 AM   #2
n5bb
Intergalactic Postmaster
 
Join Date: May 2004
Location: Irving, Texas
Posts: 8,917
DMARC has been around for about 5 years. It's supported by many email providers and domains.
https://en.wikipedia.org/wiki/DMARC

DMARC is a policy set up by the owner of a domain to specify how failure of SPF and DKIM will be handled. I don't have a Runbox account so don't know if they support SPF, DKIM, and DMARC.
  • When sending, SPF, DKIM, and DMARC must be enabled in the DNS records for the sending From domain. DKIM security signing must also be implemented by the sending server.
  • When receiving, SFP, DKIM, and DMARC are supported by the receiving server (if implemented). Some systems only support some of these standards (such as DKIM only).
  • Conventional message automatic redirection/forwarding breaks SPF as implemented in DMARC. DKIM can also be broken during forwarding if certain portions of the message are altered. Because of this, automatic redirection is now risky and can't be guaranteed to work between all accounts. That's the price we pay for reducing spam and phishing.
Bill
n5bb is offline   Reply With Quote
Old 18 Mar 2017, 09:30 AM   #3
dbowdley
Cornerstone of the Community
 
Join Date: Nov 2008
Location: UK
Posts: 549

Representative of:
Runbox.com
When Runbox implements DKIM on outgoing messages, DMARC will be an option that you can use on your own domain.

SPF and DMARC are set up by the domain owner and they don't require that Runbox do anything. DMARC can in fact be used with just SPF or DKIM, but it is intended that you use both.

As n5bb mentioned, it also contains a reporting mechanism that allows reporting back of information about messages received with a "From" address on your domain, and which servers sent those messages. The reporting aspect requires that the receiving email provider supports sending of reports back to the domain owner.

Some sources recommend you set up DMARC prior to implementing SPF and DKIM on your domain so that you can see the reports of mail received from your domain with no specific DMARC policy in place. This can then provide useful information to help you decide what DMARC policy to have for your domain.

As already mentioned implementing any process that might result in rejecting mail (preferably spam) can also affect legitimate mail so has to be done carefully.
dbowdley is offline   Reply With Quote
Old 14 May 2023, 02:27 AM   #4
emebrs
Essential Contributor
 
Join Date: Dec 2012
Posts: 343
Has anyone here attempted to use DMARC with Runbox? A few years ago Geir remarked:
Quote:
DMARC and TLS-RPT do not yet seem mature enough to implement, but we are looking at ways to support at least the former in a reliable way.
I'm not sure what "support" would mean if Runbox doesn't have to do anything (as indicated in this thread).
emebrs is offline   Reply With Quote
Old 8 Jul 2023, 02:08 AM   #5
placebo
Cornerstone of the Community
 
Join Date: Jun 2004
Posts: 740
Quote:
Originally Posted by emebrs View Post
I'm not sure what "support" would mean if Runbox doesn't have to do anything (as indicated in this thread).
If you're hosting email for your domain using Runbox, then Runbox doesn't need to do anything. All you need to do is set up the DNS records to publish the DMARC policy for your domain.

Receiving email, however, is a different story. When Runbox accepts a message, it can look at the DMARC record published for the sending domain and use it to determine how to handle a spammy message. Or it could not support DMARC and simply ignore the record.
placebo is offline   Reply With Quote
Old 22 Jul 2023, 05:28 AM   #6
SideshowBob
Essential Contributor
 
Join Date: Jan 2017
Posts: 278
It's not a good idea to publish a DMARC record for a domain without having a DKIM signature for that domain on email that uses it in the "From" header. For most users this would mean that the hosting company provides support.
SideshowBob is offline   Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump


All times are GMT +9. The time now is 09:33 PM.

 

Copyright EmailDiscussions.com 1998-2022. All Rights Reserved. Privacy Policy