Welcome • User Guide
ToS • Privacy • Canary
Donate • Bugs • License

©2025 Poal.co

922

Almost all of the spam I analyze has bad security records - ignoring anything with a bad / no DMARC would stop probably 80% of our spam problems.

The rest is a mix of no SPF/DKIM (I have no idea why that's even being accepted) and internal problems at the sender's computer. You're never going to fix PEBCAC.

Almost all of the spam I analyze has bad security records - ignoring anything with a bad / no DMARC would stop probably 80% of our spam problems. The rest is a mix of no SPF/DKIM (I have no idea why that's even being accepted) and internal problems at the sender's computer. You're never going to fix PEBCAC.
[–] • 1 pt

I’ve considered going full deny if you don’t have your shit configured right. Dmarc+dkim+spf, but I was honestly worried I’d get bounced from people that in need to see theirs email.

But I think your words made me realize a few things. What I told mom years ago: nothing of importance happens on email. If they need you they will call, if they dont then fuck then it’s not important.

But I’m to a point in my businesses that I could give a fuck if a client bounces, or even a prospect. Client will call if they don’t hear from me. Prospects mostly call already.

I have far enough business to not give a fuck.

I’m sold, I am gonna tighten this shit up in the next week or so.

Thanks for the nudge.

[–] • 0 pt

I'd love to, but I don't have control of that portion of the email system here.

We get a lot of smaller vendors (and some large ones) that don't have their ducks in a row, and they get bounced. I don't understand what the email gateway is doing, because company A that we need to see (and doesn't have their DMARC set to reject or quarantine) gets rejected, but company B, with a bad envelope and no DMARC at all will go right through.

[–] • 1 pt

You're never going to fix PEBCAC

That's the fucking truth. I had a user today who got a phishing message (not even a good one, just set the FROM to the company name - didn't even bother spoofing anything) last night. Landed in his personal quarantine box. He ignored because it looked funny.

Another came in to his quarantine box this morning. He told me "I figured it wasn't fake if they sent it twice." He then proceeded to open the message, scan a QR code on his phone, go to a fake 365 login page and enter in his network user name and password.

How do fucking retards like that even dress themselves?

[–] • 1 pt

Sounds like someone needs a vtech "My First Laptop" at their desk.

[–] • 1 pt

That would be funny to replace his and pretend like it’s all good now.

[–] • 0 pt

I've threatened it to people here. That, and replace their desk phone with one of those Fisher-Price Chatter Phones.