YLB Score › The checks, explained › Part II, Will their message reach you?
The fake-mail filter
There is a public setting that tells the world's mail servers what to do with a message that claims to be from you but is not: let it through, send it to junk, or refuse it. Think of it as a filter for fakes. Most small firms have never fitted one.
Without it, a criminal can send your clients an invoice in your name, and it lands in their inbox looking exactly like yours. Fitted and set to watch is a start; set to refuse is where you want to be.
Worth about 4 points of your 100 for a typical businessAbout 1 hour, by whoever runs your email
See for yourself
Type your domain into dmarcian's checker. It tells you whether the filter is fitted and which setting it is on.
- Free tooldmarcian's record checker
How to fix it
- Fit the filter set to watch, and read the reports it sends you for a fortnight to confirm your real mail passes.
- Move it to send fakes to junk, then to refuse them.
- Your email provider or your domain provider can do each step; it is one line each time.
The technical version, for your web person
DMARC. A TXT record at _dmarc.<domain> beginning v=DMARC1. p=quarantine or p=reject earns the full two marks; p=none earns half and is its own finding.
What the check reads. DNS TXT on _dmarc.<host> starting v=DMARC1; this row is the 'record absent entirely' outcome.
This is one of the checks in a YLB Score report. Every report is free, read by a person before it goes out, and written so that you can act on it without us. Ask for yours.