E-Mail monitoring and securing

Thomas_W

Hello All,
what are you using for Mail Monitoring and to secure mails get delivered?
We use SPF, DKIM, DMARC as standard, but have still not a good solution for the DMARC Reports. And test TLS-RP and MTA-STS. Of course DANE would be a nice to have on Top.

When we moved to Enhance, we moved to new servers. With this we lost 10+ years reputations from the IP of our mail server. What makes it a bit more difficult.

What is your experience to build up trust, fight against Spam and have a proper monitoring?

Thanks and kind regards,
Thomas

cPFence

Thomas_W

FWIW, since you're already using cPFence, if it's installed on your mail server, it will monitor your IP reputation daily and notify you if any spam reports are detected. It’s a helpful way to stay ahead of any issues and maintain deliverability.

Steamon

I tried at the beginning to build IP reputation but it was a fight to keep getting into mailbox on microsoft / office 365 / hotmail / outlook.

Now I use IP licenses of spamexperts for some clients for inbox and the postfix relay method for outgoing this works and get no phone calls a e-mail can not be delivered.

Do note the spamexperts relay does not work under smarthost on the gui yet but will be fixed soon I think.

Thomas_W

cPFence cPFence is a great tool and I have the reputation check running. But there I expect never a report. We are more pro active to fight against spam. With this we are since years not in any public Blacklist.

The most issues are some wrong email addresses that the customers got per Webform. With a small amount of emails per server this can case temporary blacklistening at Microsoft. Also wrong setups of DNS are sometimes issues. With a long reputation at the IP address this makes not a real issue. But sadly they go for the IP address and not the domain.

With a good monitoring the reason should be found fast. But at moment it's reading log files, DMARC and TLS-RPT what is time consuming. Also check the DNS settings manual. I am sure I am not the only one in this situation. So I hope somebody found a solution already. Otherwise it's still a option to use external service, when the cost/value is ok.