Domain spoofing poses a serious threat to email integrity and security. This issue arises when attackers impersonate a domain they don’t own, often for malicious purposes like phishing or distributing malware. To counteract domain spoofing, three security measures—DKIM, SPF, and DMARC—operate together on the open internet to authenticate emails and prevent fraudulent activities.

JetEmail requires all domains to have a DMARC record configured. While DMARC can be set to different enforcement levels, a monitoring-only policy (p=none) is perfectly acceptable. This requirement helps establish basic email authentication practices and provides visibility into potential domain spoofing attempts. If no DMARC record is detected for a domain, JetEmail will reject any attempts to send email from that domain.

​
Required DMARC Record

Name: _dmarc.domain.com TTL: 14400 Value:

v=DMARC1; p=none