# Draft email  two decisions needed (whitelist + DMARC)

Status: draft v2, to be sent by Bastien. Written 2026-08-14.
Tone: family (Narin is Bastien's brother-in-law), no corporate phrasing.

---

**Subject:** advmfr.net mail filtering, need 2 things from you

Hi Narin,

The new mail filtering on advmfr.net is live since this morning. Turns out the old setup
was making things worse: every time it caught a spam, it sent an error message back. And
since spammers fake their sender address, those replies were going to random innocent
people. That's the kind of behavior that gets a mail server blacklisted. This morning I
even watched it happen live with one of the virus mails you've been getting.

It's fixed now. Suspicious mail goes to a quarantine folder instead, I check it every day,
and nothing gets deleted until I'm sure the rules never touch real mail.

I need two things from you to finish:

1. A list of senders that must never be blocked. Think accountant, important customers
and suppliers, anything that sends you automated alerts. Domain names are enough, one per
line, like @company.co.th. Don't put banks on the list. I know that sounds weird, but your
logs already show scammers faking kasikornbank addresses, so I protect bank mail another
way.

2. Pick a mailbox to receive DMARC reports. Those are automatic technical emails from
Google, Microsoft and friends, a handful per day. I'd just use narin@advmfr.net unless
you prefer another one. You can ignore them completely, I'm the one reading them.

I also wrote a short guide for AKE so he can keep an eye on the quarantine folder and
ping me when something needs adjusting. It's attached, can you pass it on to him?

Talk soon,
Bastien

---

*Internal notes (not part of the email):*
- Attach `ake-monitoring-guide.md` (exported to PDF if preferred), not shared online.
- If Narin answers with individual addresses instead of domains, both work: the filter
  rule uses `From · contains`, so `@domain` or a full address are both fine.
- Writing rules applied (v2): no em dashes, no "In short:" / "Quick update" openers,
  no bold section headers inside the mail body, contractions everywhere, first person
  singular since Bastien does the work.