Barracuda

Security, Access and Reliability for Cloud-Connected Networks and Applications

DMARC - Domain-based Message Authentication, Reporting, & Conformance

Criminals often impersonate a brand to trick the recipient into authorizing a wire transfer, or to steal credentials or credit card information. Email authentication protocols like Domain-based Message Authentication, Reporting, & Conformance (DMARC) are a great step in helping prevent this type of fraud.

Barracuda DMARC and Email Security Resources:

Using Barracuda Sentinel for DMARC Setup

by

This is the third in a series of blog posts on DMARC.  You can view all of our DMARC posts here.

Barracuda Sentinel simplifies DMARC setup and enforcement for your domain(s):

• Domain fraud protection using DMARC authentication
• Collects and analyzes DMARC feedback data – actionable recommendations
• Provides visibility into senders using domain – puts control back in admins hands
• Helps fix misconfigurations – builds confidence in correctness of SPF/DKIM setup, enhances email deliverability
• Communicates unauthenticated email policy to recipients – reinforces trustworthiness

[Read more…] about Using Barracuda Sentinel for DMARC Setup

DMARC – Enforcement Options

by

This is the second post in a series on DMARC.  View the whole series here.

The DMARC tag that specifies the enforcement policy is p.  This tag tells the receiver of the message what the sender would like the receiving party to do when a message fails DMARC authentication.  This policy tag has three possible values: None, Quarantine, and Reject.

• None:  The sender does not request a specific action. DMARC remains in reporting mode and continues to filter and gather data on the message stream.  

• Quarantine:  The sender asks the receiving party to treat DMARC authentication failures as suspicious.  The receiving mail server could then place the message into a spam folder, scrutinize the message with additional intensity, and/or flag the message as suspicious.  This option may provide the ability for further review by personnel tasked with analysis. 

• Reject:  The sending party asks the receiver to reject email that fails DMARC authentication.  This rejection should occur during the SMTP session, with either a full rejection and a 550 code, or a silent discard with no failure message to the sender.   

DMARC users typically start with ‘p=none’ which sets DMARC to reporting mode. After making sure their legitimate email systems pass DMARC (by either configuring their DKIM or SPF records), users typically switch directly to ‘p=reject’ which guarantees that domain spoofing emails are automatically quarantined.

DMARC is easy with Barracuda Sentinel. Visit our site here to get more information on how we can help protect you from spear phishing and cyberfraud.

What is DMARC?

by

DMARC is an email authentication protocol designed to prevent domain spoofing.

Domain spoofing, where an attacker uses a company’s domain to impersonate someone in the company, is an increasingly widespread cybersecurity attack. In fact, over 96% of companies experience domain spoofing, yet only one-third of organizations use DMARC, according to the Federal Trade Commission.

[Read more…] about What is DMARC?

Simplifying DMARC deployment and reporting

by

CNET recently reported that the US Department of Homeland Security (DHS) has given federal agencies 90 days to implement HTTPS and DMARC within their organizations.  The deployment of these technologies should provide additional protection for the employees and the public. 

The HTTPS protocol is familiar to most Internet users, especially toward the ‘Cyber Monday' shopping season when online security and safe shopping become frequent topics.  DMARC is still one of the lesser known and/or used technologies, as you can see in this DMARC Adoption by Sector data from the OTA 2017 Honor Roll (pdf):

This DHS announcement is a great opportunity for us to talk about DMARC and why it's so important to our online safety.

[Read more…] about Simplifying DMARC deployment and reporting