sender-policy-check

To verify if an email sender domain is safe, check SPF, DKIM, and DMARC alignment by querying DNS TXT records. This sender authentication audit evaluates whether the domain is properly configured to prevent email spoofing and phishing risks.

The best way to investigate email spoofing and phishing is by evaluating SPF, DKIM, and DMARC alignment alongside Mimecast sender reputation. This approach produces a risk rating and recommended allow/block approach for the investigated domain.

Yes, Mimecast sender reputation factors into vendor email onboarding checks by pulling recent delivery history for the domain. This combined with SPF, DKIM, and DMARC audits helps determine if a new vendor's domain is trustworthy.

To troubleshoot legitimate partner emails being blocked by Mimecast, review the SPF, DKIM, and DMARC configuration for the sender domain. Misaligned DMARC policies or missing DKIM selectors often cause legitimate partner emails to fail authentication and get blocked.

If DKIM selectors are unknown during a DMARC alignment check, the process handles unknown selectors by prompting for assumptions. This allows the SPF, DKIM, and DMARC audit to proceed and produce a sender risk rating despite missing selector details.