Due to a change of email provider from HostEurope to Google’s G Suite, a more tightened email security could be set up.

While a SPF DNS entry existed before, DKIM and DMARC could be established now as well.

Even though the DMARC policy was set to “none” in the beginning, I intensely monitored the DMARC reports and tried to keep violations as low as possible.

To do this, I set up a dashboard in Grafana, which collects the dmarc reports from a dedicated mailbox.

Currently I could set the DMARC policy to “quarantine”, as violations became quite low.