Fix nudj domain spam rating

[collingo]

• [x] Register nudj.email domain
• [ ] Switch mailgun to nudj.email domain
• [ ] Audit subscriptions and remove costly ones
  • [ ] Remove hunter
  • [ ] Check Mailgun
• [x] Investigate intercom email integration—does this come from mailgun?
• [ ] Review bulk sender guidelines https://support.google.com/mail/answer/81126
• [ ] Fill out https://support.google.com/mail/contact/bulk_send_new?rd=1
• [x] Review GSuite Toolbox MX settings https://toolbox.googleapps.com/apps/checkmx/check?domain=nudj.co&dkim_selector=
• [x] Fix SPF records
• [x] DKIM authentication DNS setup
• [x] Setup DMARC
• [ ] Monitor DMARC daily report emails going to tech@nudj.co
• [x] See if we can authorise Mailgun to use our SPF and DKIM setup

Useful tools:

• Google Postmaster Tools
• GSuite Toolbox Check MX
• GSuite GMail Admin Console
• DMARC inspector

[collingo]

Looks like Intercom is working ok. If it was broken it may have been the SPF and DKIM config that helped. I suspect it was not actually broken as the messages are sent by Intercom and they just spoof the from to look like it was from our email address. They force us to validate ownership of the domain in order to apply the spoof.

[collingo]

It also looks like Mailgun is working ok now too. Again it might have been since the SPF and DKIM changes took hold but we are getting Mailgun originated emails coming in to our inboxes.

[collingo]

OK so dmarc was not setup correctly on the domain. The TXT record was put onto nudj.co rather than _dmarc.nudj.co. This has just been corrected so we should see dmarc reports coming into tech@nudj.co from now on.

[collingo]

Update from mailgun...

The point of DMARC is to ensure that the From: address reflects the same domain as the domain that is sending the email. As more email service providers adopt DMARC and increase security in general, messages that have a From: address with a domain that differs from the sending domain will be marked as spam, or worse, rejected completely. Email best practices are clear that the domain of the From: address and sending domain should match.

Looks like we'll need to set the from address to be something@mail.nudj.co so we get around the dmarc filters. Probably wise to setup a no-reply@mail.nudj.co with a nice nudj avatar so we can guarantee application message delivery. Might be able to set a reply-to header as robyn@nudj.co so we keep response channels open.