Educause Security Discussion mailing list archives

SPAM filtering


From: Thomas Carter <tcarter () AUSTINCOLLEGE EDU>
Date: Wed, 2 Oct 2019 16:30:19 +0000

I wasn't sure which listserv to post this on, so I thought I'd give this one a shot.

We recently switched to Barracuda for our spam filtering solution. We started with the default settings, but have seen 
a large number of valid messages getting flagged due to incorrect DKIM and/or SPF settings, including other .edu 
domains. I've been trying to notify the ones we find, but I wildly underestimated the number of domains with incorrect 
SPF records; they have records, they just aren't correct (e.g. they use Office 365 for email, but don't have 
Microsoft's SPF info in their record). I think we're going to have to back off on filtering based on them. Do you flag 
emails based on SPF FAIL/soft FAIL or incorrect DKIM? Do you make sure it's correct at your institution?

Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu<http://www.austincollege.edu/>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: