{"id":453,"date":"2019-03-06T13:58:28","date_gmt":"2019-03-06T11:58:28","guid":{"rendered":"https:\/\/forflukesake.co.za\/wp\/?p=453"},"modified":"2019-07-01T20:14:04","modified_gmt":"2019-07-01T18:14:04","slug":"dmarc-bring-technologies-together","status":"publish","type":"post","link":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/","title":{"rendered":"DMARC: Bring Technologies Together"},"content":{"rendered":"\n

DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let’s combine and do it better!!! In a nutshell, DMARC assists with Mail Security and Mail Deliverability for the Sender and the Receiver.
<\/p>\n\n\n\n

If you don’t know what I am referring to you can read up on SPF<\/a> and DKIM<\/a>. If time is limited let me do a quick Recap for you.
<\/p>\n\n\n\n

SPF<\/strong><\/h2>\n\n\n\n

With Sender Policy Framework( SPF for Short) the receiving mail server contact the authoritative domain and Says \u201cI just received this mail claiming it has permission to send on your behalf, here is the location it came from\u201d and the authoritative domain then replies either Yes that is a trusted location or No I don\u2019t Trust that location. Which allows the receiving domain to decide what to do with the mail.
<\/p>\n\n\n\n

DKIM<\/strong><\/h2>\n\n\n\n

DomainKeys Identified Mail, on the other hand, gets singed with a digital Signature when leaving the Sending Domain Server. On the Receiving domain server, it contacts the Signing Domain where a public key is kept. It then uses this key to confirm the mail was not tampered with in transit. And again this allows the receiving domain to decide what to do with the mail.
<\/p>\n\n\n\n

How is this not enough?<\/strong><\/h3>\n\n\n\n

Well, there are always people out there that understand technology better than us and they found ways to trick these technologies to think it is work. Now don\u2019t get me wrong I am not saying all technologies if Full Proof if it was we would not have so much Anti-Virus update or Microsoft updates.
<\/p>\n\n\n\n

For Example with SPF what if your Server is hosted in a Shared environment like Office 365 of the GSuite, although you have limited the threat it is still in the location where thousands of other domains are hosted. And if DKIM does it signing on certain sections of the the mail one can easily tamper with the unsigned section and still get the same result.
<\/p>\n\n\n\n

Thus DMARC was created.
<\/p>\n\n\n\n

What is DMARC?<\/strong><\/h2>\n\n\n\n

Like both the above two mentioned Technologies there are two sides to this:<\/p>\n\n\n\n

The Sending Domain specifies how much of the mail needs to pass verification and what needs to happen to the mail depending on the result<\/p>\n\n\n\n

The Receiving Domain can choose to follow the Sending domain specifications or not.
<\/p>\n\n\n\n

Confused?<\/strong><\/h3>\n\n\n\n

So think of it like this, you sent a mail to a third party. The mail leaves your Mail server and gets signed with the necessary DKIM key that is added to the header. The receiving mail server then on receival first check that the server that sent it has the permission to send it. This is done using the return-path section in the header. It then takes the Signing domain (d=\u201dValue\u201d) from the DKIM section of the Header and validates it to see if tampering did not take place. Let’s say both of them returned with a Passcode.
<\/p>\n\n\n\n

DMARC then takes both the return-path and the d=\u201dValue\u201d and test for alignment.<\/p>\n\n\n\n

What is the alignment? Both these values get compared to the \u201cfrom\u201d address in the email if the domain Matches then it is aligned and if not then it is not aligned. Each one’s alignment gets tested separately.
<\/p>\n\n\n\n

Now you can specify in the Record you are going to create if the alignment should be relaxed or strict. Depending on the result you want you then specify to the receiving mail server what it should do to the email.
<\/p>\n\n\n\n

\"DMARC\"<\/figure><\/div>\n\n\n\n

Relaxed vs Strict<\/strong><\/h3>\n\n\n\n

In relaxed mode, Sub-domain is treated the same as top-level domains. For example, if you key would be d=\u201dexample.com\u201d, then emails from both test@example.com<\/a> and test@new.example.com<\/a> would both pass alignment. With strict mode, test@new.example.com<\/a> would fail alignment.
<\/p>\n\n\n\n

Reporting<\/strong><\/h3>\n\n\n\n

Before getting into the setup it is very important that you understand DMARC is not something you set up quickly and expect everything is working you can easily stop legitimate emails from being delivered because you don’t have a clear overview of where the company’s emails are being generated.
<\/p>\n\n\n\n

This is where the reporting you receive back is very useful. Servers that use DMARC response back every set amount of hours on all emails received to the sending mail domain. Now you start to see which servers are using the company domain and to which locations it is being sent. It also shows you how many of those emails the SPF, DKIM, and Alignment passed on. These reports do get technical very fast but luckily there are providers like https:\/\/dmarcian-eu.com<\/a> that assist with quickly getting the information into a neat and readable format.
<\/p>\n\n\n\n

See below example of the dmarcian dashboard:<\/p>\n\n\n\n

\"https:\/\/dmarcian-eu.com\"<\/figure><\/div>\n\n\n\n

Finally the setup<\/strong><\/h2>\n\n\n\n

There are two ways of doing the setup.<\/p>\n\n\n\n

  1. Get an online tool to assist, I used dmarcian<\/a> and it takes you step-by-step what each section does and what you can configure.<\/li>
  2. Setting up the record manually as this is much more work it gives you a better understanding of the technology.<\/li><\/ol>\n\n\n\n

    Regardless<\/strong><\/h3>\n\n\n\n

    Regardless of which one you choose I suggest setting up DMARC to monitor only for at least a month and then systematically moving to quarantine and the rejection in small intervals at a time.
    <\/p>\n\n\n\n

    Manual<\/strong><\/h2>\n\n\n\n

    DMARC is a DNS txt record type, set up on the authoritive domain. The Name of the record would start with \u201c_dmarc\u201d and end with \u201c.mydomain.co.za\u201d. Example: _dmarc.forflukesake.co.za.
    <\/p>\n\n\n\n

    The Value can range have a range of different properties, if a setting is omitted it will pass a default setting for a full breakdown of the setting see DMARC Settings<\/a>
    <\/p>\n\n\n\n

    See below example:<\/p>\n\n\n\n

    v=DMARC1; p=none; rua=mailto:fluke@forflukesake.co.za; ruf=mailto:fluke@forflukesake.co.za; fo=1; sp=none; ri=86400;
    <\/p>\n\n\n\n

    This would monitor the results of all emails but not do anything with it, this is purely to receive back information on your environment so that the necessary changes and configs can be done to get the pass rate as close to 100 % as possible.
    <\/p>\n\n\n\n

    Once you are at a high-level pass rate you would change the setting to:<\/p>\n\n\n\n

    v=DMARC1; p=quarintine; pct=10; rua=mailto:fluke@forflukesake.co.za; ruf=mailto:fluke@forflukesake.co.za; fo=1; sp=none; ri=86400;<\/p>\n\n\n\n

    Now it will start quarantine (Spam) mail that is not following DMARC on a sample group of 10. So only 10 of every 100 mails will be checked.
    <\/p>\n\n\n\n

    You can add and remove properties as you require but I suggest having a set time between test to confirm if it is better for your environment or not.
    <\/p>\n\n\n\n

    Below is a breakdown of Tags I used and what each Tag is used for.<\/p>\n\n\n\n
    Tag Name<\/strong><\/td>Purpose<\/strong><\/td>Sample<\/strong><\/td><\/tr>
    v<\/td>Protocol version<\/td>v=DMARC1<\/td><\/tr>
    pct<\/td>Percentage of messages subjected to filtering<\/td>pct=20<\/td><\/tr>
    ruf<\/td>Reporting URI for forensic reports<\/td>ruf=mailto:authfail@example.com<\/td><\/tr>
    rua<\/td>Reporting URI of aggregate reports<\/td>rua=mailto:aggrep@example.com<\/td><\/tr>
    p<\/td>Policy for organizational domain<\/td>p=none, quarantine, reject<\/td><\/tr>
    sp<\/td>Policy for subdomains of the OD<\/td>sp=reject<\/td><\/tr>
    adkim<\/td>Alignment mode for DKIM<\/td>adkim=s
    Relax or Strict<\/td><\/tr>
    aspf<\/td>Alignment mode for SPF<\/td>aspf=r
    Relax or Strict<\/td><\/tr><\/tbody><\/table>\n","protected":false},"excerpt":{"rendered":"

    Now you start to see which servers are using the company domain and to which locations it is being sent.<\/p>\n","protected":false},"author":1,"featured_media":460,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[47,3],"tags":[27,51,52,103,25,50],"class_list":["post-453","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-email","category-permissions","tag-forflukesake","tag-dkim","tag-dmarc","tag-reporting","tag-security","tag-spf"],"yoast_head":"\nDMARC: Bring Technologies Together \u00bb For Fluk3 Sake<\/title>\n<meta name=\"description\" content=\"DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let's combine and do it better!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DMARC: Bring Technologies Together \u00bb For Fluk3 Sake\" \/>\n<meta property=\"og:description\" content=\"DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let's combine and do it better!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/\" \/>\n<meta property=\"og:site_name\" content=\"For Fluk3 Sake\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-06T11:58:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-07-01T18:14:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"469\" \/>\n\t<meta property=\"og:image:height\" content=\"129\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Fluk3\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@F1uk31\" \/>\n<meta name=\"twitter:site\" content=\"@F1uk31\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fluk3\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/\"},\"author\":{\"name\":\"Fluk3\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/#\\\/schema\\\/person\\\/806db9f6184fe1af5af378472b5fb2e8\"},\"headline\":\"DMARC: Bring Technologies Together\",\"datePublished\":\"2019-03-06T11:58:28+00:00\",\"dateModified\":\"2019-07-01T18:14:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/\"},\"wordCount\":1204,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/#\\\/schema\\\/person\\\/806db9f6184fe1af5af378472b5fb2e8\"},\"image\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/Untitled-Diagram.jpg\",\"keywords\":[\"#ForFlukeSake\",\"DKIM\",\"DMARC\",\"Reporting\",\"Security\",\"SPF\"],\"articleSection\":[\"Email\",\"Permissions\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/\",\"url\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/\",\"name\":\"DMARC: Bring Technologies Together \u00bb For Fluk3 Sake\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/Untitled-Diagram.jpg\",\"datePublished\":\"2019-03-06T11:58:28+00:00\",\"dateModified\":\"2019-07-01T18:14:04+00:00\",\"description\":\"DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let's combine and do it better!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#primaryimage\",\"url\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/Untitled-Diagram.jpg\",\"contentUrl\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/Untitled-Diagram.jpg\",\"width\":469,\"height\":129,\"caption\":\"Yes, Maybe, No\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/453\\\/dmarc-bring-technologies-together\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DMARC: Bring Technologies Together\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/#website\",\"url\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/\",\"name\":\"For Fluk3 Sake\",\"description\":\"You don't need a degree in computers to do it\",\"publisher\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/#\\\/schema\\\/person\\\/806db9f6184fe1af5af378472b5fb2e8\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/#\\\/schema\\\/person\\\/806db9f6184fe1af5af378472b5fb2e8\",\"name\":\"Fluk3\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/cropped-Fluk3-1.png\",\"url\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/cropped-Fluk3-1.png\",\"contentUrl\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/cropped-Fluk3-1.png\",\"width\":696,\"height\":363,\"caption\":\"Fluk3\"},\"logo\":{\"@id\":\"https:\\\/\\\/forflukesake.co.za\\\/wp\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/cropped-Fluk3-1.png\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DMARC: Bring Technologies Together \u00bb For Fluk3 Sake","description":"DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let's combine and do it better!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/","og_locale":"en_US","og_type":"article","og_title":"DMARC: Bring Technologies Together \u00bb For Fluk3 Sake","og_description":"DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let's combine and do it better!","og_url":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/","og_site_name":"For Fluk3 Sake","article_published_time":"2019-03-06T11:58:28+00:00","article_modified_time":"2019-07-01T18:14:04+00:00","og_image":[{"width":469,"height":129,"url":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg","type":"image\/jpeg"}],"author":"Fluk3","twitter_card":"summary_large_image","twitter_creator":"@F1uk31","twitter_site":"@F1uk31","twitter_misc":{"Written by":"Fluk3","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#article","isPartOf":{"@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/"},"author":{"name":"Fluk3","@id":"https:\/\/forflukesake.co.za\/wp\/#\/schema\/person\/806db9f6184fe1af5af378472b5fb2e8"},"headline":"DMARC: Bring Technologies Together","datePublished":"2019-03-06T11:58:28+00:00","dateModified":"2019-07-01T18:14:04+00:00","mainEntityOfPage":{"@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/"},"wordCount":1204,"commentCount":0,"publisher":{"@id":"https:\/\/forflukesake.co.za\/wp\/#\/schema\/person\/806db9f6184fe1af5af378472b5fb2e8"},"image":{"@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#primaryimage"},"thumbnailUrl":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg","keywords":["#ForFlukeSake","DKIM","DMARC","Reporting","Security","SPF"],"articleSection":["Email","Permissions"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/","url":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/","name":"DMARC: Bring Technologies Together \u00bb For Fluk3 Sake","isPartOf":{"@id":"https:\/\/forflukesake.co.za\/wp\/#website"},"primaryImageOfPage":{"@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#primaryimage"},"image":{"@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#primaryimage"},"thumbnailUrl":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg","datePublished":"2019-03-06T11:58:28+00:00","dateModified":"2019-07-01T18:14:04+00:00","description":"DMARC is one of those Technologies which sees the benefits of other Technologies and Goes: Hey, What you are doing is awesome, but let's combine and do it better!","breadcrumb":{"@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#primaryimage","url":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg","contentUrl":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg","width":469,"height":129,"caption":"Yes, Maybe, No"},{"@type":"BreadcrumbList","@id":"https:\/\/forflukesake.co.za\/wp\/453\/dmarc-bring-technologies-together\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/forflukesake.co.za\/wp\/"},{"@type":"ListItem","position":2,"name":"DMARC: Bring Technologies Together"}]},{"@type":"WebSite","@id":"https:\/\/forflukesake.co.za\/wp\/#website","url":"https:\/\/forflukesake.co.za\/wp\/","name":"For Fluk3 Sake","description":"You don't need a degree in computers to do it","publisher":{"@id":"https:\/\/forflukesake.co.za\/wp\/#\/schema\/person\/806db9f6184fe1af5af378472b5fb2e8"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/forflukesake.co.za\/wp\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/forflukesake.co.za\/wp\/#\/schema\/person\/806db9f6184fe1af5af378472b5fb2e8","name":"Fluk3","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2018\/09\/cropped-Fluk3-1.png","url":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2018\/09\/cropped-Fluk3-1.png","contentUrl":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2018\/09\/cropped-Fluk3-1.png","width":696,"height":363,"caption":"Fluk3"},"logo":{"@id":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2018\/09\/cropped-Fluk3-1.png"}}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/03\/Untitled-Diagram.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/patsl4-7j","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":229,"url":"https:\/\/forflukesake.co.za\/wp\/229\/e-mail-security-with-spf\/","url_meta":{"origin":453,"position":0},"title":"E-Mail Security with SPF","author":"Fluk3","date":"2018-10-23","format":false,"excerpt":"Sender Protocol Framework is a method of checking if the server that is sending the mail has permission from the domain to send the mail","rel":"","context":"In "Email"","block_context":{"text":"Email","link":"https:\/\/forflukesake.co.za\/wp\/category\/services\/email\/"},"img":{"alt_text":"SPF","src":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2018\/10\/spf.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":237,"url":"https:\/\/forflukesake.co.za\/wp\/237\/e-mail-security-with-dkim\/","url_meta":{"origin":453,"position":1},"title":"E-Mail Security with DKIM","author":"Fluk3","date":"2018-11-05","format":false,"excerpt":"Email is one of the most used applications for Communication today. So how the fluke do you secure it. Well, this is the task I had to go and find out after receiving some potentially very destructive phishing emails, the emails looked so real that if the user did not\u2026","rel":"","context":"In "Email"","block_context":{"text":"Email","link":"https:\/\/forflukesake.co.za\/wp\/category\/services\/email\/"},"img":{"alt_text":"DKIM","src":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2018\/11\/DKIM.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":3039,"url":"https:\/\/forflukesake.co.za\/wp\/3039\/microsoft-office-365-block-email-attachments\/","url_meta":{"origin":453,"position":2},"title":"Microsoft Office 365 Block Email Attachments","author":"Fluk3","date":"2020-12-21","format":false,"excerpt":"Emails are one of the most targeted platforms when it comes to end users. End users accept mails as legitimate even after numerous training sessions. For the reason Administrators needs to protect them against as much as possible mails prior to actually coming through to their Mail box. In this\u2026","rel":"","context":"In "Cloud Computing"","block_context":{"text":"Cloud Computing","link":"https:\/\/forflukesake.co.za\/wp\/category\/cloud-computing\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2020\/12\/BlockEmailAttachments.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2020\/12\/BlockEmailAttachments.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2020\/12\/BlockEmailAttachments.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2020\/12\/BlockEmailAttachments.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2020\/12\/BlockEmailAttachments.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":330,"url":"https:\/\/forflukesake.co.za\/wp\/330\/global-signatures-vs-office-365\/","url_meta":{"origin":453,"position":3},"title":"Global Signatures VS Office 365","author":"Fluk3","date":"2019-02-14","format":false,"excerpt":"What happens when you have a Large Organization with hundreds of users and probably a small IT department.","rel":"","context":"In "Email"","block_context":{"text":"Email","link":"https:\/\/forflukesake.co.za\/wp\/category\/services\/email\/"},"img":{"alt_text":"Photo by Philippe Krief on Unsplash;","src":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/02\/Mailbox-scaled.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/02\/Mailbox-scaled.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/02\/Mailbox-scaled.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/02\/Mailbox-scaled.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/02\/Mailbox-scaled.jpg?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2019\/02\/Mailbox-scaled.jpg?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":4899,"url":"https:\/\/forflukesake.co.za\/wp\/4899\/disabling-ntlm-v1-on-windows-workstations\/","url_meta":{"origin":453,"position":4},"title":"Disabling NTLM v1 on Windows Workstations","author":"Fluk3","date":"2026-02-02","format":false,"excerpt":"NTLM stands for NT LAN Manager. Windows uses this protocol for authentication when Kerberos fails or legacy systems exist. Modern Active Directory relies on Kerberos for normal domain logon and access. NTLM remains mainly for backward compatibility. NTLM exists in multiple versions. Version 1 relies on weak cryptography and outdated\u2026","rel":"","context":"In "Active Directory"","block_context":{"text":"Active Directory","link":"https:\/\/forflukesake.co.za\/wp\/category\/microsoft-windows\/windows-server\/active-directory\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2026\/01\/image.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2026\/01\/image.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2026\/01\/image.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2026\/01\/image.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2026\/01\/image.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/forflukesake.co.za\/wp\/wp-content\/uploads\/2026\/01\/image.png?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":4885,"url":"https:\/\/forflukesake.co.za\/wp\/4885\/create-a-csr-submit-to-namecheap-and-export-a-pfx-file-from-iis-10\/","url_meta":{"origin":453,"position":5},"title":"Create a CSR, Submit to NameCheap, and Export a PFX File from IIS 10","author":"Fluk3","date":"2025-06-12","format":false,"excerpt":"This guide details how to: Create a Certificate Signing Request (CSR) using IIS 10 Submit the CSR to NameCheap and complete DNS validation Install the issued certificate Export a .pfx file for application use \ud83e\uddf0 Prerequisites Windows Server with IIS 10 Domain access to manage DNS (e.g., Afrihost) NameCheap account\u2026","rel":"","context":"In "Cloud Computing"","block_context":{"text":"Cloud Computing","link":"https:\/\/forflukesake.co.za\/wp\/category\/cloud-computing\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/posts\/453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/comments?post=453"}],"version-history":[{"count":0,"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/posts\/453\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/media\/460"}],"wp:attachment":[{"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/media?parent=453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/categories?post=453"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forflukesake.co.za\/wp\/wp-json\/wp\/v2\/tags?post=453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}