Valimail Enforce™ 

DMARC aggregate reports, categorized by domain, are sent regularly by email receivers to an email address specified by the respective domain.

In an email domain, netblocks can be assigned to cover the IP addresses of allowed senders. If a netblock is assigned to a third-party sender, that third-party sender can be selected from the drop-down menu.

A feature available on the Valimail website that checks the SPF, DKIM, and DMARC DNS records for a domain name that you enter. It then analyses the validity and function of the records and generates a report.

SPF mechanisms can be entered directly into the Valimail system. This feature is used for certain custom configurations.

Number or percentage of emails that pass DMARC authentication and are assigned a result of “success.”

If the domain on which DKIM authentication succeeds shares an organizational domain with the domain shown in the visible From header of the email, then DKIM alignment exists. This is one criteria that can be used for DMARC authentication.

A DKIM fail means it can't be confirmed that the claimed sender of an email (as identified in the DKIM email header) actually created the email, or that the email was not changed in transit.

DKIM uses PKI (Public Key Infrastructure) for authentication. PKI uses a private key to encrypt a message, and a public key to decrypt it. The email sender has the private key, which it keeps secret, and the public key is placed in DNS so that it can be retrieved by all email receivers in order to authenticate received emails. DKIM keys can be used by the Valimail system to authenticate email messages.

A DMARC fail means that the From address that the user sees does not align with a domain that passed either SPF or DKIM authentication. In this way, DMARC prevents fraudulent emails from being delivered to the user's inbox.

A receiver can be configured to ignore the DMARC policy specified by the sender, and handle the email in a way determined by the receiver.

This graph on the Home tab shows how email messages were handled (delivered, quarantined, rejected). This is associated with the DMARC Policy that is set by the sending domain.

A third-party service that is allowed to send email for a customer domain. Valimail will authorize emails from enabled senders.

A registered domain is considered to be in enforcement when any unauthenticated email from that domain is rejected or quarantined. However, it is possible that there are records defined on subdomains that mean the organizational domain is not actually at enforcement.

 Valimail can send reports about system performance or other metrics to email recipients who are not registered in the Valimail system.

Failure reports are one type of report that can be output by DMARC authentication mechanisms. Generally they are not provided by email receivers because they may reveal personally identifiable information (PII).

Company that forwards email on behalf of another company or person.

An internal sender is a system is that is owned by the customer. It could also be a dedicated line the customer has leased for a third party to use, such as a marketing cloud system. If the system is configured to send email using the customer’s domain name, then it needs to added as a netblock to the customer account. This can happen in two ways:

A contiguous range of IPv4 or IPv6 addresses. It has a starting IP address, followed by some number of IP addresses, and an ending IP address. In SPF records, netblocks are typically used to define sets of IP addresses that are permitted to send email for a domain.

A type of attack where the attacker uses emails, which impersonate emails from legitimate senders or companies, to induce the receiver to click on links to fraudulent websites, reveal personal or private information, or carry out incorrect instructions such as transferring money from company accounts.

A DMARC policy can be set to None, Quarantine, or Reject. The policy determines what action should be carried out by the email receiver in the event the email does not authenticate.

Number or percentage of emails that fail DMARC authentication and are assigned a result of “quarantine.” The result is determined based on the DMARC policy setting (p=quarantine).

Any domain registered in the Valimail system. An account may have multiple registered domains.

Number or percentage of emails that fail DMARC authentication and are assigned a result of “reject.” The result is determined based on the DMARC policy setting (p=reject).

The selector is used to choose a specific DKIM public key that is stored in DNS for a given domain. Domains can have multiple DKIM keys available for use.

The sending status of a registered domain is one of the following.

If a subdomain of a registered domain is used for only one email sender, this switch can be turned on to improve the classification of email by the Valimail system.

If the domain on which SPF authentication succeeds shares an organizational domain with the domain shown in the visible From header of the email, then SPF alignment exists. This is one criteria that can be used for DMARC authentication.

An SPF fail means that the machine that sent an email is not allowed to send emails for the sending domain (the domain identified by the non-visible Return-Path address).

Email that lacks several features needed for authentication.