Hi @all,

I thought DMARC was unimportant for a small domain, but I played around with it a few days ago. There are some DMARC monitor sites that you can use for free & I was surprised when I saw that in 2-3 days about 1500 emails were sent via my exit subdomains.

Then I set DKIM and SPF to strict adkim=s; aspf=s; and DMARC subdomain policy to reject sp=reject;

Since then, emails about Tor-exits have dropped to 0 ;-)