Skip to content

Commit f2a67ed

Browse files
committed
DMARC spoof updates
1 parent 488f7d5 commit f2a67ed

File tree

2 files changed

+21
-9
lines changed

2 files changed

+21
-9
lines changed

exchange/exchange-ps/exchange/New-AntiPhishPolicy.md

Lines changed: 11 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -163,9 +163,11 @@ Accept wildcard characters: False
163163
```
164164

165165
### -DmarcQuarantineAction
166+
**Note**: This setting is currently in Preview.
167+
166168
This setting is part of spoof protection.
167169

168-
The DmarcQuarantineAction parameter specifies the action to take when the message is detected as spoofing and the policy action value in the DMARC TXT record for the domain is `p=quarantine`. Valid values are:
170+
The DmarcQuarantineAction parameter specifies the action to take when a message fails DMARC checks and the sender's DMARC policy is `p=quarantine`. Valid values are:
169171

170172
- MoveToJmf: Deliver the message to the recipient's mailbox, and move the message to the Junk Email folder.
171173
- Quarantine: This is the default value. Move the message to quarantine.
@@ -186,9 +188,11 @@ Accept wildcard characters: False
186188
```
187189

188190
### -DmarcRejectAction
191+
**Note**: This setting is currently in Preview.
192+
189193
This setting is part of spoof protection.
190194

191-
The DmarcRejectAction parameter specifies the action to take when the message is detected as spoofing and the policy action value in the DMARC TXT record for the domain is `p=quarantine`. Valid values are:
195+
The DmarcQuarantineAction parameter specifies the action to take when a message fails DMARC checks and the sender's DMARC policy is `p=reject`. Valid values are:
192196

193197
- Quarantine: This is the default value. Move the message to quarantine.
194198
- Reject: Reject the message.
@@ -537,12 +541,14 @@ Accept wildcard characters: False
537541
```
538542

539543
### -HonorDmarcPolicy
544+
**Note**: This setting is currently in Preview.
545+
540546
This setting is part of spoof protection.
541547

542-
The HonorDmarcPolicy parameter specifies whether to use the `p=` policy action in the DMARC DNS (TXT) record for the domain when spoofing is detected. Valid values are:
548+
The HonorDmarcPolicy parameter allows different actions to take on messages that fail DMARC checks, based on the sender's DMARC policy. Valid values are:
543549

544-
- $true: If spoofing is detected and the action specified in the DMARC TXT record for the domain is `p=quarantine`, use the action that's specified by the DmarcQuarantineAction parameter. If spoofing is detected and the action specified in the DMARC TXT record for the domain is `p=reject`, use the action that's specified by the DmarcRejectAction parameter.
545-
- $false: This is the default value. If spoofing is detected, use the action that's specified by the AuthenticationFailAction parameter.
550+
- $true: If a message fails DMARC checks and the sender's DMARC policy is `p=quarantine`, the DmarcQuarantineAction parameter specifies the action to take on the message. If a message fails DMARC checks and the sender's DMARC policy is `p=reject`, the DmarcRejectAction parameter specifies the action to take on the message.
551+
- $false: This is the default value. If the message fail DMARC checks, ignore the action in the sender's DMARC policy. The AuthenticationFailAction parameter specifies the action to take on the message.
546552

547553
```yaml
548554
Type: Boolean

exchange/exchange-ps/exchange/Set-AntiPhishPolicy.md

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -166,9 +166,11 @@ Accept wildcard characters: False
166166
```
167167

168168
### -DmarcQuarantineAction
169+
**Note**: This setting is currently in Preview.
170+
169171
This setting is part of spoof protection.
170172

171-
The DmarcQuarantineAction parameter specifies the action to take when the message is detected as spoofing and the policy action value in the DMARC TXT record for the domain is `p=quarantine`. Valid values are:
173+
The DmarcQuarantineAction parameter specifies the action to take when a message fails DMARC checks and the sender's DMARC policy is `p=reject`. Valid values are:
172174

173175
- MoveToJmf: Deliver the message to the recipient's mailbox, and move the message to the Junk Email folder.
174176
- Quarantine: This is the default value. Move the message to quarantine.
@@ -189,6 +191,8 @@ Accept wildcard characters: False
189191
```
190192

191193
### -DmarcRejectAction
194+
**Note**: This setting is currently in Preview.
195+
192196
This setting is part of spoof protection.
193197

194198
The DmarcRejectAction parameter specifies the action to take when the message is detected as spoofing and the policy action value in the DMARC TXT record for the domain is `p=quarantine`. Valid values are:
@@ -540,12 +544,14 @@ Accept wildcard characters: False
540544
```
541545

542546
### -HonorDmarcPolicy
547+
**Note**: This setting is currently in Preview.
548+
543549
This setting is part of spoof protection.
544550

545-
The HonorDmarcPolicy parameter specifies whether to use the `p=` policy action in the DMARC DNS (TXT) record for the domain when spoofing is detected. Valid values are:
551+
The HonorDmarcPolicy parameter allows different actions to take on messages that fail DMARC checks, based on the sender's DMARC policy. Valid values are:
546552

547-
- $true: If spoofing is detected and the action specified in the DMARC TXT record for the domain is `p=quarantine`, use the action that's specified by the DmarcQuarantineAction parameter. If spoofing is detected and the action specified in the DMARC TXT record for the domain is `p=reject`, use the action that's specified by the DmarcRejectAction parameter.
548-
- $false: This is the default value. If spoofing is detected, use the action that's specified by the AuthenticationFailAction parameter.
553+
- $true: If a message fails DMARC checks and the sender's DMARC policy is `p=quarantine`, the DmarcQuarantineAction parameter specifies the action to take on the message. If a message fails DMARC checks and the sender's DMARC policy is `p=reject`, the DmarcRejectAction parameter specifies the action to take on the message.
554+
- $false: This is the default value. If the message fail DMARC checks, ignore the action in the sender's DMARC policy. The AuthenticationFailAction parameter specifies the action to take on the message.
549555

550556
```yaml
551557
Type: Boolean

0 commit comments

Comments
 (0)