// EMAIL DOMAIN HARDENING · HANS STUDY · ONTARIO, CANADA
Email domain hardening, DMARC to quarantine
A domain with an SPF record copied from a hosting provider's setup guide three years ago, no DKIM on half the sending services, and DMARC sitting at "none" if it exists at all. That combination is what lets someone spoof your domain in a phishing email aimed at your own clients. This moves one domain from whatever it has today to DMARC at quarantine.
What it covers
An inventory of every service that sends mail as your domain, a corrected SPF record that covers all of them without exceeding the lookup limit, DKIM signing turned on for each sending service that supports it, and a DMARC record moved in stages from monitoring to quarantine, with the reports read along the way so a legitimate sender doesn't get blocked in the process.
What you receive
- The corrected SPF, DKIM, and DMARC records, with the DNS changes made or handed to your host
- A short written record of every sending service found and signed
- DMARC aggregate reports reviewed through the move to quarantine
Questions
Why does my domain need DMARC at quarantine?
An SPF record copied from a hosting provider's guide, no DKIM on some sending services, and DMARC at none or missing is what lets someone spoof your domain in a phishing email aimed at your own clients. This moves one domain to DMARC at quarantine.
How do you avoid blocking my legitimate mail?
I inventory every service that sends mail as your domain first. DMARC then moves in stages from monitoring to quarantine, with the reports read along the way so a legitimate sender doesn't get blocked in the process.
What do I receive?
The corrected SPF, DKIM, and DMARC records, with the DNS changes made or handed to your host. You also get a short written record of every sending service found and signed.
What does the corrected SPF record do?
It covers every service that sends mail as your domain without exceeding the SPF lookup limit. DKIM signing is turned on for each sending service that supports it.
What do I bring to the scoping call?
Your domain and a list of what sends mail as it. A short call confirms the scope.
How much does email domain hardening cost?
The scope is confirmed on a scoping call, and a written quote comes before any work starts.
Book a scoping call
Bring your domain and a list of what sends mail as it, and a short call confirms the scope.
Delivered remotely, or through the DHD, a remote access device shipped to site.