Skip to the documentation
Knowledge base

Phishing & spam filtering

Mail the sending domain itself disowns lands in Spam rather than the inbox.

Details

  • A DMARC failure is acted on only where the domain publishes an enforcing policy, and p=none is the owner saying “do not change how you treat this”, and is left alone.
  • An upstream spam verdict is honoured: X-Spam-Status, X-Spam-Flag, or a score of five or more.
  • SPF alone is deliberately not enough. Forwarded mail fails SPF legitimately, and filing every forwarded message as spam would be worse than the spam it caught.