January 25, 2021

Locking down domains that never send email

I’m trying to secure some domains that currently don’t send email, following this guide: [https://www.gov.uk/guidance/protect-domains-that-dont-send-email](https://www.gov.uk/guidance/protect-domains-that-dont-send-email)

It recommends checking that they are secured using this tool – [https://www.mailcheck.service.ncsc.gov.uk/](https://www.mailcheck.service.ncsc.gov.uk/) – but this is only available for UK public sector users. Is there a public alternative service or tool (free or paid) that someone would vouch for as reliable? I feel the need to verify rather than just blindly implement the recommendations in the guide.



Give https://mxtoolbox.com/SuperTool.aspx a try. You can select what you want to check from the drop-down box and get a report on the config.

That NCSC check looks at the SPF, DKIM, and DMARC records as well as the certificate. The tool above should replicate the checks.

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: By filling this form and submitting your commen, you acknowledge, agree and comply with our terms of service. In addition you acknowledge that you are willingly sharing your email address with AiOWikis and you might receive notification emails from AiOWikis for comment notifications. AiOWiksi guarantees that your email address WILL NOT be used for advertisement or email marketting purposes.

This site uses Akismet to reduce spam. Learn how your comment data is processed.