DKIM Key Rotation Without Breaking Authentication: A Step-by-Step Plan
DKIM keys don't expire on their own, which is exactly why they get forgotten. Most domains publish one key ...
ARC Headers Explained: Fixing SPF/DKIM Failures on Forwarded Mail and Mailing Lists
Enforce DMARC and, sooner or later, someone reports that legitimate mail sent through a mailing list, a corporate forwarder, ...
How to Read DMARC Aggregate (RUA) and Forensic (RUF) Reports
The moment you publish a DMARC record with a rua tag, mailbox providers start emailing you gzipped XML reports ...
Google & Yahoo Bulk Sender Requirements: The Compliance Checklist
Google and Yahoo tightened the rules for anyone sending significant volume to Gmail and Yahoo Mail addresses. The headline ...
MTA-STS and TLS-RPT: Enforcing Encrypted Delivery Between Mail Servers
Standard SMTP negotiates encryption with STARTTLS — but STARTTLS is opportunistic. If an attacker on the network path strips ...
BIMI Explained: How to Get Your Logo Verified in Gmail and Yahoo Inboxes
Brand Indicators for Message Identification (BIMI) puts your logo next to your emails in the inbox — right where ...
How to Configure FortiGate SSL VPN for Remote Access (and Harden It)
FortiGate SSL VPN gives remote staff access to internal systems through the firewall using nothing more than a browser ...
FortiGate Firewall Policies Explained: Interfaces, Zones, NAT and Security Profiles
A FortiGate firewall does nothing until you write a policy. Every packet crossing it is matched against an ordered ...
pfSense as a Reverse Proxy: HAProxy and Let’s Encrypt ACME Setup
You have one public IP address and five internal web servers. You need each to answer on its own ...
pfSense Firewall Setup Guide: Interfaces, Rules and NAT Port Forwarding
pfSense turns an ordinary x86 box into an enterprise-grade firewall and router, free and open source. It gives you ...