ipfour
DNS configuration screen showing DMARC, SPF and DKIM records with authentication status indicators
DMARC / SPF / DKIM

Stop criminals sending emails from your domain.

Without DMARC enforcement, anyone can send email pretending to be you. 83% of UK organisations have no enforcement in place. IP Four configures DMARC, SPF, and DKIM correctly so your domain cannot be spoofed.

Domain Spoofing Stopped
Deliverability Improved
Cyber Essentials Compatible
83%
of UK organisations have no DMARC enforcement policy in place
48hrs
typical time to deploy DMARC monitoring and begin collecting data
100%
of domain spoofing attacks stopped by correctly enforced DMARC reject policy
Capabilities

Complete email authentication done correctly.

DMARC, SPF, and DKIM work together. Getting one wrong breaks the others. We configure all three correctly and maintain them as your business and sending services change.

DMARC Policy Implementation

Full DMARC deployment from monitoring through quarantine to reject policy. Configured correctly so legitimate email is never blocked while spoofed email is stopped completely.

Monitor to RejectPolicy EnforcementSubdomain Coverage
Learn more

SPF Record Configuration

Sender Policy Framework records configured to authorise every legitimate sending source for your domain. Third-party senders like CRMs, marketing platforms, and helpdesks included.

Authorised SendersThird-Party ServicesSPF Flattening
Learn more

DKIM Setup and Alignment

DomainKeys Identified Mail configured for your mail platform and all third-party sending services. Cryptographic signatures verify your emails are genuine and unaltered in transit.

Cryptographic SigningMultiple SelectorsKey Rotation
Learn more

DMARC Reporting and Analysis

Aggregate and forensic DMARC reports collected and analysed. Human-readable dashboards show who is sending email on behalf of your domain and whether it is passing authentication.

Aggregate ReportsForensic ReportsSending Source Discovery
Learn more

Brand Protection

Proper DMARC enforcement stops criminals using your domain to attack your clients and suppliers. Correct authentication also improves legitimate email deliverability to major providers.

Brand ProtectionDeliverability ImprovementReputation Management
Learn more

Ongoing Monitoring and Enforcement

DMARC records monitored continuously for new sending sources and policy failures. SPF and DKIM updated when you add new services. Monthly reporting on authentication health.

Continuous MonitoringRecord MaintenanceMonthly Reporting
Learn more
How It Works

From audit to full enforcement.

01

Domain Authentication Audit

We check your current SPF, DKIM, and DMARC records. Identify all legitimate sending sources for your domain including third-party services. Map the gaps.

02

Record Configuration

SPF record updated to include all legitimate senders. DKIM configured for your mail platform and third-party services. DMARC deployed in monitoring mode.

03

Report Analysis and Tuning

DMARC reports collected and analysed over 4 to 6 weeks. Legitimate sending sources identified and authenticated. Policy moved to quarantine then reject as confidence builds.

04

Enforcement and Ongoing Management

Full reject policy enforced. Monthly reporting on authentication health. Records updated when new services are added. Annual review of all sending sources.

Real Results

How we have protected Lancashire businesses.

Domain Being Used to Attack Clients

A Blackburn accountancy firm discovered criminals were sending emails to their clients from their exact domain, requesting updated payment details ahead of tax deadlines.

DMARC, SPF, and DKIM configured and enforced within 48 hours. Spoofing attacks stopped completely. Clients notified. Firm reputation protected.

Cyber Essentials Certification Requirement

A Preston technology company needed to achieve Cyber Essentials certification. Their assessor identified missing DMARC enforcement as a critical gap in their email security.

Full DMARC implementation completed. SPF and DKIM configured correctly. Cyber Essentials certification achieved. Email authentication health maintained ongoing.

Email Deliverability Problems

A Lancashire marketing agency found their client emails were being delivered to spam folders at major providers. Investigation revealed missing DKIM signatures and a broken SPF record.

SPF record rebuilt and flattened. DKIM configured for all sending services. Deliverability improved significantly within 2 weeks. Client complaints resolved.

Ready to Start?

Check your DMARC status in 60 seconds.

Our free DMARC check tells you instantly whether your domain can be spoofed, whether your SPF record is correct, and whether DKIM is configured. Takes 60 seconds and costs nothing.