DMARC · SPF · DKIM · STOP SPOOFING

DMARC reports, a tool to protect your domain

DMARC authenticates emails, combats phishing, protects domains and enhances security by strengthening SPF and DKIM. It looks complicated, but it isn't.

DIAGRAM · AN EMAIL USING YOUR DOMAIN

Domain-based Message Authentication, Reporting & Conformance
Email with From: @yourdomainlegitimate or spoofed
RECEIVER CHECKS
SPFAuthorised IP?
DKIMValid signature?
aSPF · aDKIMAligned with From:?
DMARCPolicy: none · quarantine · reject
RUA / RUFReport to Iberlayer
IBLTechnical report for you
DeliveredQuarantineRejected

DMARC + EMAIL GUARDIAN

Analyse and improve email security

DMARC reports together with Email Guardian allow you to:

  • Verify DKIM signature checking (relaxed or strict)
  • Check SPF policies (relaxed or strict)
  • Verify DMARC policies (none, quarantine or reject)

Which translates into better visibility of email authentication, secure delivery to your recipients and identification of spoofing and unauthorised use.

DMARC reports

EVERYTHING YOU CAN DO THANKS TO DMARC

Iberlayer invites you to discover it

Anti-spoofing

Real protection comes from SPF and DKIM, which require DMARC to be enforced firmly.

SPF enforcement

Thanks to DMARC you can tell third parties what to do when an SPF check fails.

SPF for subdomains

Everyone worries about their domains, but protecting subdomains (even non-existent ones) is just as important.

SPF alignment

SPF generally applies to the protocol From (Envelope-From), not the header From. With DMARC we can apply it to the latter too.

DKIM enforcement

If an email has no DKIM signature we cannot know whether DKIM is not used or the email is spoofed. DMARC answers this question.

DKIM alignment

aDKIM ensures the signing domain matches the sender domain (From: header), validating the authenticity of the message.

Reports by email

Via DMARC you can request reports of the emails that third parties detect, valid or not, using your domains in the From:.

Technical reports

Iberlayer processes the reports received and generates complete technical reports to help discover spoofing and misuse of your domains.

SPF adjustments

Iberlayer advises, helps and accompanies its customers to have the strictest possible SPF.

DKIM adjustments

Iberlayer advises, helps and accompanies its customers to always use author DKIM on all their traffic.

DMARC adjustments

Iberlayer advises, helps and accompanies its customers to have the strictest possible DMARC configuration.

Third-party checks

For legal reasons we never generate reports to third parties, guaranteeing maximum privacy for your customers and suppliers.

Web console

Real-time web console with 2FA and 1 year of logs, searchable in tenths of a second.

100% European service

100% European cloud. No hardware or software required. Easy to set up. Operational in minutes.

Very low ROI

Single licence type with everything included from the start, based on number of users and at a very competitive price.

24/7 support

Single-level technical support, served by Iberlayer technicians 24 hours a day, 7 days a week, in English and Spanish.

HOW DOES IT WORK?

The DMARC report cycle

You publish the policy, receivers enforce it, Iberlayer turns their reports into useful information and helps you tighten it. Every turn of the cycle closes one more door to spoofing.

1YOUYour servers send email

Legitimate mail signed with DKIM and sent from SPF-authorised IPs. Your DMARC record tells receivers what to do with everything else.

SPFDKIMDMARC p=none/quarantine/reject
2RECEIVERSReceivers check

Gmail, Microsoft 365, Yahoo and any server enforcing DMARC verify SPF, DKIM and their alignment with the From: of every message using your domain.

aSPFaDKIMdeliver · quarantine · reject
3RECEIVERS → IBERLAYERReports to Iberlayer

Every receiver sends aggregate (RUA) and forensic (RUF) reports to the address Iberlayer manages for you. They are never shared with third parties.

RUA · XMLRUFTLS
4IBERLAYER → YOUTechnical report and tuning

Iberlayer processes the reports, detects spoofing and misuse, and helps you harden SPF, DKIM and DMARC up to the strictest possible policy.

web console2FAadvice
AND BACK TO STEP 1: WITH A HARDENED POLICY, RECEIVERS REJECT EMAILS THAT SPOOF YOUR DOMAIN

SEE IT IN ACTION

It only takes one click on a malicious email to put your entire organization at risk

Request a real test

Start protecting your email today. Fill out the form and our experts will arrange a free demo session for you.

  • Stop email attacks in real time
  • Easily identify the most threatened user accounts
  • Automatically stop data leaks and security threats
* Required fields