Regional domain · mail authentication
su.edu.krd
su.edu.krd asks receivers to deliver failures anyway
su.edu.krdSPFDMARC109 names in the log
What is published
- SPF
- published
- SPF default
- ?all
- DMARC
- published
- DMARC policy
- none
su.edu.krd asks receivers to deliver failures anywayDMARC is published with p=none, which requests reporting but no enforcement. It is the correct first step and an incomplete last one: until it moves to quarantine or reject, forged mail is still delivered.
What it means
This domain asks receivers to report failures but deliver them anyway. Mail that claims to come from su.edu.krd therefore has little or nothing it can fail.
How it is fixed
Publish a DMARC record at _dmarc.su.edu.krd. Start at p=none with a reporting address, read the reports, then move to p=quarantine and p=reject once legitimate senders are accounted for. A domain that sends no mail at all can publish a rejecting policy immediately.
This reads only what su.edu.krd has chosen to publish in DNS.
No mail was sent, no mail server was contacted, and this does not test whether
spoofing would in fact succeed — only what the domain has asked receivers to do.
Anyone can verify it with a DNS query.