add stopping email scams

networking/stop_email.md

@@ -0,0 +1,22 @@
+---
+title: Stop email impersonating your domain
+tags: 
+- networking
+requires:
+- networking/dns_records.md
+---
+
+There is nothing to stop scammers from sending email claiming to be coming from your domain.
+And the older it gets, the more valuable it is for spoofing.
+
+Just add these two TXT records to the DNS for your domain:
+
+
+Name   | Type | Value
+:------|:----:|:-----
+@      | TXT  | v=spf1 -all
+_dmarc | TXT  | v=DMARC1; p=reject;
+
+The first says there is not a single SMTP server on earth authorized to send email on behalf of your domain.
+The second says that any email that says otherwise should be trashed.
+