This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
How we can make sure if our domain having DKIM (and valid) or not? I can see DKIM is enabled on the Microsoft security portal but when i check on mxtoolbox the page say i not have DKIM record
Hello,
You will want to ensure that you publish the CNAME records into your domains Public DNS records.
Here is a nice little guide (see Create DKIM Keys - Domain Key Identified Mail):
https://lazyadmin.nl/office-365/configure-dkim-office-365/
If this is helpful please accept answer.
Hi..
Sorry for my mistakes, i have wrong type in mxtoolbox. Now i can see i have valid DKIM record and published to public DNS. With this DKIM record, why sometimes we still get spoofed mail?
You will now be protected from other's spoofing your domain and trying to act like they are internal employees. It does not stop from spoofing outside domains.
Sometime we got email example from valid@mydomain.com but actually the return path is not from valid@mydomain.com. This threat categorized as spoof mail right?
Setting up a SPF/DKIM will protect against John Smith john.smith@mydomain.com (them actually spoofing your real domain to your internal users which can compromise information).
If they are smart and put John Smith john.smith@mydomain.com as their Sender Name they can typically bypass. You can do two things:
#1 Train your organization to see that the full sender address is John Smith john.smith@mydomain.com fakeemail@someemail.com (they are not technically spoofing your domain but faking it with the Sender Name
#2 Set up a Exchange Mail Flow rule to block outside e-mails that contain MYDOMAIN.COM in the Sender Name.
If this is helpful please accept answer.