Artwork

Content provided by PsiMac and Jerry Zigmont. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by PsiMac and Jerry Zigmont or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.
Player FM - Aplicație Podcast
Treceți offline cu aplicația Player FM !

Best Of CCP - 221: DMARC, Eero's & Toupee's

34:25
 
Distribuie
 

Manage episode 436479720 series 1106994
Content provided by PsiMac and Jerry Zigmont. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by PsiMac and Jerry Zigmont or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

Joe discusses the problem with automatically forwarding mail in the era of DMARC and walks through an explanation from Kerio:

- You have a hosted Kerio email account, with a domain of clientname.com

- You have a forwarding rule configured to forward all email addressed to name@clientname.com to clientaddress@gmail.com

- Gmail enforces a DMARC policy

- Gmail sees the forwarded email as if they were coming from the original sender, e.g.: Facebook, PayPal, etc. etc.

- But the emails are NOT coming from the mailservers of those senders (e.g. mail.facebook.com, mail.paypal.com – fake examples), they are actually coming from the Kerio mail server (mail.itekmail.com)

- This triggers a failure of compliance with DMARC, since the sending mail server doesn't match the sending address.

- Unfortunately there isn't much we can do about this, other than use the main account (name@clientname.com), setting it up on a mail client of your choice, to avoid this problem.

- Joe and Jerry discuss Eero, and Joe explains the challenge of configuring an alternate subnet:

- Eero ad automatically assigned 192.168.7.1 subnet

- AV guy had static IPs manually assigned to two IR controllers

- had to use Advanced settings to hangs subnet to 10.0.0.0 (10.0.1.0 not an option; annoying because that's a common Apple one so this must be a common issue)

- tried to adjust starting IP to 10.0.0.1, subnet to 255.255.0.0, and ending IP to 10.0.1.254; didn't work

- after updating, allowed me to select 10.0.0.0 range and change it to 10.0.1.0 range, which worked

  continue reading

102 episoade

Artwork
iconDistribuie
 
Manage episode 436479720 series 1106994
Content provided by PsiMac and Jerry Zigmont. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by PsiMac and Jerry Zigmont or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

Joe discusses the problem with automatically forwarding mail in the era of DMARC and walks through an explanation from Kerio:

- You have a hosted Kerio email account, with a domain of clientname.com

- You have a forwarding rule configured to forward all email addressed to name@clientname.com to clientaddress@gmail.com

- Gmail enforces a DMARC policy

- Gmail sees the forwarded email as if they were coming from the original sender, e.g.: Facebook, PayPal, etc. etc.

- But the emails are NOT coming from the mailservers of those senders (e.g. mail.facebook.com, mail.paypal.com – fake examples), they are actually coming from the Kerio mail server (mail.itekmail.com)

- This triggers a failure of compliance with DMARC, since the sending mail server doesn't match the sending address.

- Unfortunately there isn't much we can do about this, other than use the main account (name@clientname.com), setting it up on a mail client of your choice, to avoid this problem.

- Joe and Jerry discuss Eero, and Joe explains the challenge of configuring an alternate subnet:

- Eero ad automatically assigned 192.168.7.1 subnet

- AV guy had static IPs manually assigned to two IR controllers

- had to use Advanced settings to hangs subnet to 10.0.0.0 (10.0.1.0 not an option; annoying because that's a common Apple one so this must be a common issue)

- tried to adjust starting IP to 10.0.0.1, subnet to 255.255.0.0, and ending IP to 10.0.1.254; didn't work

- after updating, allowed me to select 10.0.0.0 range and change it to 10.0.1.0 range, which worked

  continue reading

102 episoade

Todos os episódios

×
 
Loading …

Bun venit la Player FM!

Player FM scanează web-ul pentru podcast-uri de înaltă calitate pentru a vă putea bucura acum. Este cea mai bună aplicație pentru podcast și funcționează pe Android, iPhone și pe web. Înscrieți-vă pentru a sincroniza abonamentele pe toate dispozitivele.

 

Ghid rapid de referință