Billy Dunn
Book 15 minutes with me. You leave with my cell.
Email authentication for Dallas-Fort Worth businesses
Someone faked your invoice email. Their mail servers turned it away. Most IT companies never publish the records that stop it.
We publish the records that prove which mail is really yours.
A customer gets an invoice from your company. Right logo, new bank details. They pay it. Three records on your domain (SPF, DKIM and DMARC) let the receiving mail system tell that message was never yours. We publish them properly and take the policy to enforcement.
Not sure who can send as you? Call (817) 265-5000.
Free email spoofing check
Your office
Jack, your BDunn tech
Setting your domain to reject forgeries
Billy Dunn
Founder since 1989. Book 15 minutes with me and you leave with my cell.
Three records make your domain hard to fake.
SPF, DKIM and DMARC.
Taken all the way to enforcement.
Most domains stall at none.
A project, not a subscription.
For our clients, it gets done.
The DMARC ladder: where most domains stall, and where we take yours
- 1. None Receivers just watch and report. The right place to start, the wrong place to stop.
- 2. Quarantine Fakes go to spam, once the reports say it is safe.
- 3. Reject Fakes are refused. Getting here is the actual work.
What the job involves
Find everything that sends as you.
The mail platform, the accounting package, the scheduling tool, the copier. Never written down anywhere.
Put the three in place.
SPF lists who may send for you. DKIM signs each message in each system that sends it. DMARC ties both to the From line your customer reads. Gmail and Outlook already demand them from companies that send mail in bulk.
Keep SPF inside its limit.
SPF allows ten checks that each need a DNS lookup, including the ones inside your vendors’ records. A record that grew a vendor at a time blows past that and starts failing quietly.
Read the reports.
They show who is really sending as you, so the forgotten vendor turns up before the policy blocks it.
2 more steps
Tighten the policy in steps.
First just watch, then send fakes to spam, then refuse them, each once the reports say it is safe. Forwarded mail gets tested on the way.
Write it down.
What each record is and which system it exists for.
Most domains stall at none.
A DMARC policy of none does not ask receivers to block fakes, so they can still get through.
We find records still sitting on none years after they went in. Getting to reject is the actual work.
For our clients, a project, not a subscription.
The records go in.
Every legitimate sender accounted for.
The policy moves up.
One step at a time.
Then it is done.
A new vendor that sends as you needs one update to the records. We handle that as part of looking after your IT.
Check your domain right now.
SPF, DKIM and DMARC, read straight from the public records and put in plain English. Free, no sign-up.
We help other mail systems spot fakes in your name.
What clients say
Great company if you want to protect your computer systems and keep them running and up to date. Fast response, easy to communicate with and overall great service.
Every review on Google: five stars.
Could someone send an invoice as you?
Free email spoofing check. Send us your domain and we’ll read its SPF and DMARC records and tell you where the gaps are that make faking your email easier. Forward us one email you sent and we’ll check DKIM too.
Or send one question. No charge, no pitch.
Already have someone doing your IT? Ask anyway.
Or email info@bdunn.com.
Got it.
Billy reads these himself. During office hours, we usually reply within an hour.
Need it faster? Call (817) 265-5000.
Rather talk it through?
Book 15 minutes with BillyPreview copy: nothing was sent.