text:
Meet Officer Richard Lapoint
Our resource officer is Richard Lapoint. He grew up right here in Pittsburg and says his favorite subject in school was history. Mr. Lapoint enjoys reading anything except science fiction. Before working here at Pittsburg School, he was the chief of police in Pittsburg and before that he worked for Ethan Allen, Inc. This is his third year holding the position of resource officer. He works about 12 hours per week. He is also a selectman for the town of Pittsburg. He stated that he feels his best talent is his people skills.
Officer Lapoint has one dog named Raven who is a black lab. He does like to cook but only now and then. He has been up Mt. Washington.
Officer Lapoint told us his favorite season is fall when he can hunt and walk in the woods. In his spare time, he says he enjoys hunting, fly fishing, and traveling with his wife.
Officer Lapoint's list of favorites is below:
Food: pork
Art work: contemporary
Holiday: Christmas
Sport: basketball
Sports team: Patriots, Celtics, and Red Sox
Thing to do in winter: read
Thing to do in summer: fish
TV Show: Grey's Anatomy
Color: blue
Type of car: Chevrolet pickup
Candy: Caramel
Music: all types
Dream place to visit: Colorado for the scenery
When asked what he likes about working at Pittsburg School, Officer Lapoint said he likes interacting with the staff and students.
Updated Jan. 2018
About Us > Meet our Staff >


text:
Many of the professional vocal instructors train many students that have issues with singing out of tune. Some people even think that they are Tone Deaf, and that they cannot sing in-pitch. Yet the truth is, that it is actually rare for a person to be just Tone Deaf.
The actual problem with most people is that they are tonally challenged, which means they actually should be doing aural training and pitching exercises and become familiar with the basic musical pitches and scales.
There are a few reasons why people struggle with singing out of tune.
One that many people are not too familiar with is the pitches or notes that they sign in, or a specific vocal-range which the particular song happens to be in. For example, the song might have many pitch jumps, where the person is unable to sing the changes while in pitch. The correct training when it comes to musical intervals and scales strengthens a person's abilities to sing in the different pitches along with knowing the right ways to vocalize different tunes in the song.
The second issues is when the person is not experienced with vocal positioning or vocal register, that needs to be used when singing certain pitches. For example, when asking a man to sing in a high E or an F note, they often cannot sing it, causing the voice to go off-pitch, because the man is unfamiliar when it comes to his own higher vocal-registers or head and nasal vocal ranges. It is possible to learn how to sing online without a teacher.
A few exercises to find such singing positions and vocal registers, along with different vocal warm up exercises usually assist students in finding a way to hit high pitches without sounding off key.
It is also important to become aware of breath support that is needed to project or hit certain notes when singing, especially when it comes to higher ranges of the persons voice. This might cause the person to produce an unsupported note or notes, which results in the person singing the song out-of-tune.
A few simple breathing exercises along with gaining an understanding about how breath support will affect how a person sings, also assists in solving these issues.
The third factor is that many people are not accustomed to listening to their own voice along with how their voice is blending with music while they are singing. This is one of the most important skills when it comes to singers.
In many cases, when a person sings, they are focusing far too much attention on what they are singing rather than ensuring that what they sing is matching a music accompaniment for a song This will often cause the person to unknowingly go off pitch.
Training in aural awareness and listening, assists students on how to become aware of how their pitch sounds, along with being able to carefully listen to musical harmonies within the song. Singing out of tune happens to be something that can be cured, and today there are many pitching techniques and tips available to assist you in solving your pitching problem.

subset: commoncrawl


text:
About Us
Fan Yuan Enterprise,Co. was established in 2005. insist on MIT, our tenet is profession,
innovation, and provides products of superior quality as well as the best service.
Our main products are nylon, polyester ribbon, meander christmas and gift ribbon, ultrasonic machining ribbon, screen printing ribbon, and many others like acquired, piping ribbon, three stranded rope, pleat ribbon, weeding gift ribbon, home decoration supplies and more.
We have own factory and close cooperation with dyeing factory and printing factory, can offer total solution to satisfy every demand from customer quickly.


text:
CloudyTags Directory - Price/Bathroom
Page 1 of 1
|Luxurious Heavy Glass Shower Enclosures UK - Browse luxurious glass shower enclosures in UK at special prices. Your dream shower enclosures is just a click away!
|shower enclosure enclosures bath bathroom price customer standard products
by bathroom4less (2016-06-20 13:27:54)
|3 0 0
|Independent Houses/Villas for Sale in Kolkata | Villas in Kolkata | 100% Verified Houses & Villas | Housing.com - Browse Independent/Individual Houses for sale in Kolkata. ✓100% Genuine Photos ✓Easy Navigation ✓User-friendly Search &...
|lacs price contact starts house independent property bathroom
by vivekatseo (2015-11-05 13:19:39)
|3 0 0
|sort bathroom price brush suite search plumb plumbing
by alphaplumb (2015-05-14 11:05:46)
|1 0 0
|Bathroom Ceramic Wall Tiles | Bathroom Tiles India - Bathroom Ceramic Wall Tiles India – Bonzer7 is a leading exporters and suppliers of bathroom wall and floor tiles. Click here for latest designs.
|tiles bathroom wall ceramic published offer price light india
by bonzer7 (2015-04-15 07:25:57)
|3 0 0
|A designer touch, choose from the modern slim line designs feature cubist forms or curvaceous lines to complement your existing brassware wall outlet in round or square design to match your crosswater shower bathroom accessories.
|price show shower bath bathroom crosswater accessories rooms brands
by fountaindirect (2014-07-31 09:20:08)
|2 0 0
|Give the perfect different decor to your bathroom with our adora fusion showers.These bath showers are sleek and stylish.We stock all discounted bathroom products and ship to your door.
|price show shower bath adora bathroom brands rooms fusion
by fountaindirect (2014-07-29 08:32:18)
|2 0 0
|Buy online high quality design of hansgrohe bathroom accessories with comprehensive ranges of luxury taps, basins, bidet & shower mixer.
|price bath show bathroom shower grohe brand
by fountaindirect (2014-07-23 07:13:51)
|1 0 0
|If you are looking for wood bathroom vanity, then its beer to consult with Homelivingstyle because they supply high quality material and also takes care of the customer's requirement.
|room bathroom price regular only vanities living cabinets style
by myabrown (2014-04-23 12:28:14)
|1 0 0
|Guaranteed low prices on all the bathroom lighting and vanity lights fixtures. Mylightingsource has the superb range of bathroom wall lights, vanity lighting.
|price light lighting room bathroom design lights tones source
by eleanorsmith (2014-04-07 06:30:10)
Last check: 2014-04-07 08:03:20
|1 0 0
|Buy Copper kitchen sinks, hammered copper bathtub & copper bathroom sinks online from creators of stunning Rustic Sinks.
|sink sinks copper rustic price products bathroom Hammered bathtub
by andrewcarrick (2014-02-27 09:29:41)
Last check: 2014-02-27 12:06:04
|2 0 0
|If you are looking for Bathroom Fixtures then you should try www.fancy-fixtures.com for better services.
|price originally save bath room bathroom item fixtures product
by fancyfixtures (2013-07-13 09:31:08)
Last check: 2014-03-16 20:27:22
|3 0 0
|Elan UK Bathroom Store - UK Bathroom Store - Elan Branded Bathrooms at Discounted Prices, Selling Bathrooms, Taps and Showers to the Public and Trade Suppliers of Bathrooms, Showers, Taps, Furniture and Accessoris
|crosswater mixer bathroom taps elan price taps grohe crosswater
by ukbathroomstore (2013-04-18 08:38:29)
Last check: 2014-02-22 00:26:15
|2 0 0
|Only a professional home renovation contractor can help you to make your dream house according to your budget.
|bathroom renovation cost price cash charge need oops
by taylorwill (2013-02-14 12:31:02)
Last check: 2014-02-16 08:41:01
|1 0 0


text:
I wish I could hold her in my arms, nothing in the world being able to touch us. Not me feeling like I am constantly lacking something because of my body.
The horrible feeling I get in my stomach which I try so hard to ignore, would just float away.
My family, what's left of it, not constantly pounding against my skull, thudding, so I can't hear anything else.
I wish that my only worry was feminist theory and getting to work on time.
That I didn't have to hide myself in the bathroom when I cry sometimes because I'm ashamed.
That when I showered with my girlfriend, the only thing I can think of is getting lucky.
Instead of how petrified I am to look down at myself, let alone her look at me.
Because no matter how many times I trick myself into confidence. I hate myself.
I wish that I could just be worried about eating too much food this Christmas.
Not about having toilet accidents when I try to pee standing up.
Or the fact I can't wear my favourite clothes because people will know.
I wish I wasn't in bed right now thinking about how I've failed to piece my family back together.
When I should be worried about running out of sellotape, to wrap presents.
I wish that I didn't have to worry about my mum being mentally stable, about my brother, who's now my sister, taking unprescribed hormones, and I wish I could forget the things that she said to me. About how I can't handle being a man. I wish that my dad knew that since my mum threw him out, she's never been the same, I wish he knew how happy I am that he's got a family.
Because I feel like I haven't got much of one left.
I wish I had a childhood.
I haven't got much of myself left.
I wish I could hold her in my arms, nothing in the world being able to touch us. Not me feeling like I am constantly lacking something because of my body.


text:
Cypress Semiconductor has launched the development kit for its latest PSoC 6 Bluetooth-enabled microcontroller that is set to enter production by the end of the year for IoT designs.
The PSOC 6 BLE Pioneer Kit and PSoC Creator Integrated Design Environment (IDE) software that combines Bluetooth Low Energy (BLE) 4.2 with integrated hardware-based security in a single device.
The PSoC 6 family uses a 150MHz ARM Cortex-M4 core as a host processor and a 100MHz Cortex-M0+ core to manage peripheral functions such as capacitive sensing, BLE connectivity and sensor aggregation. Early applications include wearables, personal medical devices and wireless speakers as the power consumption is 22-µA/MHz for the M4 core and as low as 15-µA/MHz for the M0+ core on the 40nm process.
It also supports multiple secure domains without additional memory devices using a ROM-based root of trust where the secure boot is uninterruptible until system protection attributes are established and allows secure execution of code in execute-only mode for protected routines. All the debug and test paths can be disabled to protect production devices.
"We have seen overwhelming interest in PSoC 6 with more than 2,500 customers registering for our early adopter program in just a few months," said John Weil, VP and GM of the MCU Business Unit at Cypress. "Initial feedback from early adopters has been that the combination of features in PSoC 6 really hits the mark for IoT designs. We are excited to see how our broader customer base will now use the PSoC 6 BLE Pioneer Kit to develop innovative products."
The PSoC BLE Pioneer Kit features a PSoC 6 MCU with Bluetooth Low Energy (BLE) connectivity. The kit enables development of touch and gesture-based interfaces that are robust and reliable with a linear slider, touch buttons and proximity sensors based on the latest generation of Cypress' industry-leading CapSense capacitive-sensing technology. Designers can also use the board to add USB Power Delivery (PD) with its Cypress EZ-PD CCG3 USB-C controller. The kit also includes a 2.7-inch E-ink Display Shield add-on board (CY8CKIT-028-EPD) with thermistor, digital mic, and 9-axes motion sensor. Designers can find more information on the PSoC 6 BLE Pioneer Kit (CY8CKIT-062-BLE) at http://www.cypress.com/cy8ckit-062-ble.
The CY8CKIT-062-BLE is available for purchase for $75 and the PSoC 6 devices are currently sampling. Production devices are expected by the end of 2017.
The CY8CKIT-062-BLE is available for purchase for $75 and the PSoC 6 devices are currently sampling. Production devices are expected by the end of 2017.


text:
Last week Brad Wheeler, Indiana University's chief information officer, appeared on the Future Trends Forum to discuss what he saw happening in higher ed and technology. Brad also spoke to the Unizin collaborative.
David Raths just wrote up an excellent account on the Campus Technology site. He identifies key points, including Wheeler's argument for a new approach to campus information and a mature approach to building inter-institutional collaboration, informed by recent history.
"It is pretty exciting that we can go from faculty-authored content delivered through a platform owned by the academy to all the digital tracks coming off of it into repositories owned by the academy that are available for IRB-approved research," he said. "We don't have to ask for our data back. It is our data, and our students' data. That is an important thing for the future. We are hoping to enable the means of improving digital education through the institutions being able to assert a much greater degree of control around content, learner interaction platforms and analytics."
(screenshot by Curtis Bonk)


text:
Taipei (AFP) - Investigators probing a bus crash in Taiwan which killed 33 people in one of the island's worst ever road accidents said Friday the driver was travelling at double the speed limit.
The group of local tourists had been returning from a trip to see seasonal cherry blossoms at a farm when their bus veered off a highway and flipped on its side on the outskirts of capital Taipei last month.
Occupants, many of them elderly, were tossed out as the roof ripped off.
It was the latest in a series of deadly incidents in Taiwan after a bus fire last July killed 25 Chinese holidaymakers.
In the first official findings since the crash last month, prosecutors said the bus had hit speeds of up to 98 kilometres (61 miles) per hour as it neared a sliproad which it veered off.
It was travelling at 79 kph when it went off the carriageway.
"The road section is labelled with speed limits of 50 km, and 40 km at four different places," a statement from Shi-Lin District Prosecutors Office said.
Dashcam footage from the car travelling behind the bus was used in the investigation, they said.
Footage shown by local media straight after the crash from a vehicle following the bus shows it turning off the main highway and flipping over, leaving behind a mangled pile of metal.
The prosecutors' report said the bus had passed safety inspections and there were no faults with the brakes.
It did not address whether the driver had been overworked, which his daughter has said was the case.
The driver had two outstanding traffic violations, including one for not wearing a seatbelt, but no drunk-driving record, the transport ministry said at the time.
There is a separate ongoing investigation into the travel agency and bus company, prosecutors said.
An investigation into last year's fatal bus inferno outside Taipei found the driver had intentionally set fire to it in a suicide bid before it veered into a crash barrier.
In February this year 21 Chinese tourists suffered injuries after their bus rammed into a railway bridge in southern Taiwan.


text:
Click to see a slideshow of our charts from the week →
Or select individually:
Banks Continue To Pull The Rug Out From Under The Economy
Can the economy revive if banks don't start to lend again?
Let's hope so.
Today the St. Louis Fed released its latest monthly look at commercial and industrial loans at major banks -- a measure that some would say represents the essence of the US banking system.
As you can see, this measure is still falling like a knife -- a bad sign for the ongoing health of the economy. (And also not what we were promised when we bailed out the banks.)
Bankers Getting Paid A Lot To Sit On Their Hands And Do Jack Squat
Yesterday we pointed you to the latest data from the St. Louis Fed showing that bank lending continues to plunge.
Rather than ply businesses with loans, banks are instead opting to hoard cash and buy Treasuries.
And yet despite the lending shutdown, bonuses are back up, per fresh data out today from the New York Comptroller.
In other words, sitting on your hands and doing nothing is a pretty lucrative gig.
History Shows Why Another Sovereign Debt Crisis Is Right Around The Corner
This chart from Gerard Minack at Morgan Stanley, inspired by the research of Harvard professor Ken Rogoff, shows how, surprisingly, sovereign debt crises are pretty common from a historical perspective.
The developed world has gone through many cycles of debt accumulation followed by sharp and sudden corrections of debt imbalances via sovereign debt crises of some form as shown below. The blue line indicates the percentage of nations either in default or restructuring their debt each year. You can see that individual national crises tend to clump together and happen in waves. The last wave was around 1990, while the 2000's were characterized by a lull in overt sovereign debt problems.
Which means that a new wave of sovereign debt defaults could be just around the corner and would be perfectly normal historically speaking; since as Morgan Stanley said in their recent related report, 'this time will probably not be different.'
The Unemployment Chart You'll Love And Hate
Here's an unemployment chart you'll both love and hate, from Citi's Steven Wieting.
As shown below, since 1980, employment (in red) has fallen after corporate profits (in black) have risen, and vice versa. The relationship is very clear.
Problem is, there's about a one-year lag between the two trends. This highlights what should simply make sense -- companies hire people once they see profits rebounding, and more importantly once they believe that adding more people will lead to higher profits. Still, this fact of economics isn't fun for the unemployed.
But here's the good news. Given the recent rebound in corporate profits the U.S. has already experienced, there is a very high chance that employment will get better over the coming twelve months. One can't stress enough the fact that employment is a lagging indicator:
Yep, The Great Money Bubble Has Come To Its End
It's constantly argued that the one reason the stock market recovered so swiftly from last year's decline was the rapid expansion of the money supply, courtesy of The Fed.
That may be, but soon that reason will no longer be valid.
The latest measure of M2, which is one of the ways the Fed measures the total supply of money out there, shows convincingly that the great expansion has peaked. Actually it's not just peaked, it's cresting in a way that's unprecedented on the chart.


text:
Are you in confusion about where to go and what to do in your vacation? The North Wales is the best place for your vacation, which allows you to discover the fun and thrill experience over there. The North wale is located at the Western Europe, which offers the wonderful option to view the lots of natural resources. In North Wales you can find the lavish rugged mountain regions, attractive valleys, ancient and historic castles and much more. Read the content and explore the attractions in North Wales.
Outstanding beauty of Snowdonia:
Whether the best visiting season is available or not the Snowdonia offers the wonderful weather and plenty of tourist attractions to all kind of age group visitors. In Snowdonia you will allow to explore the amazing historic castles, elegant and charming parks, attractive art galleries and much more. There you must take a mountain rail travel then only you can explore the complete attractions of the Snowdonia. In Snowdonia you can also find the Welsh Slate Museum, Motor Museum, Sygun Copper Mine and much more. Especially the National Mountain Centre offers many fun packed options such as the sea-cliff climbing, mountain biking, winter hill walking and mountaineering, sea-kayaking and so on. This is the apt place for all who want the great vacation in North Wales.
Awesome Shell Island:
The North Wales gets its fame by the awesome and stunning Shell Island, which is the best site for those who want a camping in an awesome island. The Shell Island resembles like a wide white pearl surrounded by the emerald green water, where you can experience the real camping over there. The Shell Island is the perfect place for the family entertainment, which offers the wonderful platform to excite the awesome shells, water species and much more. In Shell Islands you can spend your day by boat ride, watching beach attractions and camping, where you can find many accommodation facilities too. This is the good site in the North Wales.
Water falls in North Wales:
Looking for a perfect place in North Wales for your relaxation? The North Wales offers plenty of attractive waterfalls with the unique atmosphere. In North Wales you can find the tallest waterfalls termed as the Pistyll Rhaeadr, which is the perfect single drop waterfall with the 80 meters height. This will be the perfect place for the natural seekers. A next important waterfall is the River Hepste's Sgwd Yr Eira, which offers the nice natural scenery with the massive rocky along with the water. The Swallow Falls is the most famous falls, which runs over the cascaded form of the rocks and surrounded with the lush greenery plants, amiable weather. There you will immerse in to natural breathtaking views along with the clamoring waterfalls. The list of waterfalls in the North Wales extended by the Aber Falls, Horseshoe Falls, Aberdulais Falls and much more. These falls will surely give a unforgettable moments to all.
Whether you want to enjoy the natural greenery atmosphere or many man-made attractions you must visit the North Wales, so your trip to north wale allows you to explore fun and awesome excitements over there.


text:
The World Ends with You is getting a new game for smartphones. It's a social game called The World Ends with You: Live Remix, and it features songs from the previous game.
According to Famitsu, the game uses touch controls, and it's described as "an easy way" for players to enjoy The World Ends with You.
This summer, an iOS port of The World Ends with You was released.
At the end of the game, a sequel was teased. Is this that sequel?
Square Enix also revealed a new Final Fantasy social game called Final Final X Gree, which is a collaboration between Square Enix and, well, Gree. It's a card based social title.
Both games are expected to be out this winter in Japan.


text:
2 Okies Salsa
Made In Oklahoma
We made our Salsa for years and would take it to work to share. We were told we need to take this Salsa to Market. In 2016, we contacted a co-packer here in Mustang, Oklahoma to have our Salsas' packaged. There were too many regulation for us to do it at home. We had to come up with a name for our salsa. Since we are a husband and wife team from Oklahoma we came up with the name 2 OKIES Salsa. All I can say is, "you have tried the rest now try the best gourmet salsa in Oklahoma".
Where to purchase our Salsa ?
- Norman Farmers Market
- OSU-OKC Farmers Market
- Okie Dokie Mercantile Shawnee Oklahoma
- Buchanan's Vintage Flea Market OKC
- Events through out the State of Oklahoma check out our event Page.


text:
Areas of Practice
We offer a full clinical diagnostic service supported by close working relationships with the Department of Radiology and local/peripheral NHS services. Diagnostic tools include clinical history and examination, radiology (most frequently CT scanning), lung function testing and specific blood tests. Dr Bianchi acts as Clinical Lead for Interstitial Lung Disease at Sheffield Teaching Hospitals NHS Foundation Trust, and NHS England anti-fibrotic therapy prescribing centre, and can offer transfer through to NHS services and dedicated multidisciplinary care, if required.
White Lion Medical offers a comprehensive evaluation of patients with symptoms of breathlessness without current diagnostic label. Clinical evaluation includes detailed history taking and examination coupled with detailed testing of the respiratory, haematological and cardiac systems. The availability of specialist cardiopulmonary exercise testing and close clinical working relationships with consultants in cardiology complement the diagnostic offering. Treatment options are tailored to the final clinical diagnosis.
Cough is a symptom, not a disease. It is a common symptom of a wide variety of diseases that can be relatively benign to conditions such as lung cancer. Consequent to this it is imperative that patients receive timely and detailed evaluation, initially to exclude (or confirm) serious or important conditions and subsequently, if appropriate, to reassure and focus treatment to eliminate underlying causes and manage symptoms. As the possible diagnostic possibilities are wide and investigations often extensive and multiple, White Lion Medical offers a bespoke, agreed, stepwise approach to testing and treatment.
White Lion Medical Ltd offers an integrated clinical sleep service with close ties with local and peripheral NHS services. Dr Bianchi offers a diagnostic service incorporating clinical history and examination, sleep diagnostics (domiciliary or hospital based sleep studies), accurate diagnosis with treatment plan focussed on personal need in the context of national and international standards and guidelines and consistent with a patients legislative responsibilities. Treatment trials can be arranged either within the private sector or through onward referral to affiliated colleagues or services within the NHS. As Clinical Lead for Sleep & Ventilation Services at Sheffield Teaching Hospitals NHS Foundation Trust, Dr Bianchi is well placed to provide seamless care across the private sector/NHS interface.
Patients with recurrent respiratory infection required detailed evaluation of the structure and function of the lungs coupled with detailed, yet focussed, evaluation of the efficiency of the patient's immune system. Through clinical examination supported by clinical history, lung function testing and radiological evaluation a diagnosis can often be delivered with clinical advice for prevention and treatment of infective episodes. A clinical evidence based approach is used to deliver best, effective care, using the minimum therapeutic interventions required, hence limiting side effect of multiple medications. The use of chest clearance techniques is central with clinical links to respiratory physiotherapy in both the private and NHS sectors available.
A number of clinical presentations often fall outwith a traditional speciality and requires a more generalist approach through history taking, clinical examination and broad investigations including blood testing and radiological tests amongst others. This service may offer an initial screening service identifying possible or probable diagnoses with onward referral to speciality consultants, if required.
Dr Bianchi offers a comprehensive outpatient clinical review encompassing clinical examination, history taking and specific, detailed, lung function testing for all obstructive lung diseases. The distinction between conditions is critical to deliver guideline defined therapies and interventions to improve patients symptoms and quality of life. Close links with NHS services and consultant colleagues in the immediate locality and beyond facilitate joined up seamless care between the NHS primary and secondary care providers and the private sector.
Many other areas of respiratory medicine have not been specifically described in other areas. The management of pneumonia, lung nodules, pneumothorax (punctured lung), abnormal chest X-rays etc. are also catered for. In general terms if lung cancer is the main concern our view is that the NHS offers an excellent, rapid service to patients that can rarely be bettered in the private sector. However, some patients do benefit from early appointment and discussion with signposting of care and additional information being made available to NHS cancer physicians. We are happy to support and guide patients through this difficult time.
Dr Bianchi has a diverse respiratory research portfolio spanning many of the fields of respiratory medicine previously described. Although White Lion Medical Ltd is unable to offer recruitment to and involvement in clinical research trials Dr Bianchi will discuss opportunities available to you within the existing NHS led research portfolio. For those interested, with agreement of clinical commissioning groups and primary care provides care can be transferred to the NHS services thus opening up opportunities for those patients interested in participating in clinical research.


text:
1. Set up your Internet browser
2. Convert your existing database over to ALLDATA Manage Online (optional)
3. Log in and change password
4. Set up ALLDATA Manage Online
5. Get Trained on ALLDATA Manage Online
6. FAQs, Troubleshooting & What's New
Trusted Sites
Pop-up Blocker
Adobe Reader
Conversions must be done by ALLDATA.
Do not use ALLDATA Manage Online until the database has been converted.
Locate the Username and Password in your welcome email.
If you did not receive an email, call an Account Manager at 800-859-3282, option 4 to retrieve your password.
Go to manageonline.alldata.com.
Click GO TO LOGIN PAGE.
Popups in ALLDATA Manage Online will guide you through setup by showing you what buttons to click and what boxes to fill out.
Redirect to Manage OnlineTraining Options
ALLDATA Support provides self-help articles and videos designed to save you time and get you back to work. You get instant access to product and account support.
For our retail site, please visit: www.alldata.com
Terms & Conditions of Use for ALLDATA Professional and Mobile Customers
Updated: April 30, 2018
ALLDATA LLC ("ALLDATA") makes available information, materials,
and products on this Web site, subject to the following terms and
conditions. By accessing this site, you agree to the terms and
conditions as outlined in this legal notice. ALLDATA reserves the
right to change these terms and conditions from time to time at
its sole discretion.
Copyright; Limited License
The information on this Web site is protected by copyright:
© 1996–2011 ALLDATA LLC All rights reserved.
Updated January, 2013
Information Collection
An Company
©2017 ALLDATA LLC. ALLDATA, ALLDATA Repair, ALLDATA Collision, ALLDATA Manage, ALLDATA Tech-Assist and ALLDATA Mobile are registered trademarks. ALLDATA Community and ALLDATA Training Garage are marks of ALLDATA LLC. AutoZone is a registered trademark of AutoZone Parts, Inc. All other marks are property of their respective owners.
An Company
© 1996-2014 ALLDATA LLC. All Rights Reserved. ALLDATA, ALLDATA
Repair, ALLDATA Collision, ALLDATA Manage and ALLDATA Market are
registered trademarks and ALLDATA Mobile, ALLDATA Training
Garage and WITH YOU are marks of ALLDATA LLC. All other marks are
the property of the their respective holders.


text:
"Advanced Technology"
As part of our continuous improvement efforts, we have achieved a great success to develop over 200 pharmaceutical formulations in order to meet or exceed our customers'expectations. Our product span ranges from prescriptions, OTCs, APIs, health care, food supplements, to veterinary products and so on. Among these products, we have incorporated a wide range of highly advanced technologies into our product design in order to enhance the efficacy and also to minimize any possible side effects.


text:
Jack and Jess were married on the most gorgeous day a couple of weeks ago. The weather was amazing and there was plenty of love in the air at Jeir Creek Wines, Murrumbateman
Jess's mum and dad own the vineyard and it was a perfect venue for their daughter's wedding to the very affable Jack!
Jess's dress aswell as the flower girls dresses were made my Polly Stokes, a wonderfully creative dressmaker in Canberra.
I loved the relaxed nature of Jack and Jess's day, the easy feel and the genuine warmth and love expressed during the afternoon.
Thanks so much to you both for having me photograph your wedding day.
If you're getting married at one of Canberra and Murrumbateman vineyards and need a wedding photographer, let me know 0418255416 or


text:
*Participant quotes are taken from memory and are paraphrased.
On May 10, we held an event in Longmeadow, Massachusetts with Critical Connections, as part of our jointly organized Muslims in America: Dialogues Across Divides series. It was a public dialogue called "American Heretics: the History of Religious Intolerance in America," with two experts adding substance to the discussion: Peter Gottschalk, a scholar of religion and religious intolerance at Wesleyan, and Tahirah Amatul-Wadud, a nationally recognized attorney and civil rights advocate who currently legally represents the hamlet of Islamberg, New York. We named the event after Gottschalk's book, American Heretics: Catholics, Jews, Muslims, and the History of Religious Intolerance.
Two days before our event, we became aware of negative comments appearing in response to a local newspaper article that advertised it online, and related our planned event to ongoing issues of hate speech against the local Muslim community. "I'm not going in support!! I'm going to protest!!" one person wrote in the comments section. "Muslims do not belong on USA soil. They all support terrorists!!" But despite the possibility of disruptions or threats, we decided to go ahead with the event—and what resulted was deeply meaningful.


text:
Greg's Nostalgia Pics/
Special thanks to Greg Baxandall for contributing these historic photos of the legendary "Heavy Chevy" from his personal collection. A number of these pictures were taken at Van Isle Dragways, which was located in Mill Bay, BC. Greg was the owner and driver of the Heavy Chevy and was a member of the Posi-Tracs car club that was based out of Campbell River. We would like to give special mention to Rod Grice who was the original owner/builder of the Heavy Chevy before Greg.
"The Heavy Chevy" has been completely restored by its current owner Greg Love and can be seen cruising the streets of Campbell River
To see ALL the pics, check out our Full Album.


text:
Why should you take a Reiki class?
Usui Reiki is a Japanese energy healing technique that can be used with people and animals. Reiki helps to relax and balance the physical, emotional, mental and spiritual body. Reiki does not come from a person, but rather comes through a practitioner as a result of specific attunements (connections) to the different levels of Reiki energy.
When you learn Reiki, you can offer the relaxation of Reiki to yourself, your pets, and other people. You do not need any special training or experience to take a Reiki energy healing class.
As a Certified Usui Reiki Master-Teacher, I will provide the energy attunements, a training workbook, and certificate for each Reiki class.
Classes are held in Lansing, MI unless otherwise noted.
You must register at least 7 days in advance of each class.
Here's what you'll receive in my Reiki classes:
- Reiki First Degree will introduce you to the healing power of Reiki, provide four energy attunements, and you will learn how to sense energy, how to give a self-healing session and to another person. This is a one day class (8 hours).
- Reiki Second Degree will teach you how to call in the energy through three Reiki symbols (power, mental/emotional and distant healing symbols). You will receive two energy attunements and will learn additional techniques for offering Reiki. You must have 20-40 documented full Reiki sessions (on either people or animals) before registering for this class. This is a one day class (8 hours).
- Reiki Third Degree/Master is divided into a Master Practitioner certification and Master Teacher certification (practitioner required for teacher certification). I have taught Master class in destination locations to allow us to disconnect from our everyday lives and connect to the Reiki energy. And you must register at least 30 days in advance of the Master class so that travel arrangements can be made. The class can also be held in Lansing, MI when the student is ready. You must have 80-100 documented full Reiki sessions (on either people or animals) and speak with me before registering for the Master class.
- In Reiki Master Practitioner you will explore what it means to be a Reiki Master, receive the Reiki Master attunement, learn Reiki Master healing techniques, the Reiki meditation and Spiritual Review, and how Reiki combines with other healing modalities. This is class is 1-1/2 days.
- In Reiki Master Teacher class you will receive the Reiki Master Teacher attunement, learn how to give attunements, learn how to teach Reiki classes, and learn practical steps on how to create and successfully have a Reiki business. This class is an additional 2 days.
- Reiki for Animals will focus on offering Reiki energy to animals (particularly cats, dogs, horses, donkeys and small pets) and includes hands-on practice with two animals (including one off-site energy healing session with animals). It is important to learn the differences between offering Reiki to animals versus people and how to do so safely. I have extensive practical experience in offering Reiki to animals (cats, dogs, horses, even a moose), especially shelter pets. Reiki Level One is a pre-requisite for this class. This is a one day class (7 hours).
Who are my classes for?
- Anyone who is interested in alternative wellness techniques
- Anyone who is interested in learning a relaxing technique or the body, mind and spirit
- Anyone who wants to work on releasing negative emotions
- Anyone who has (or desires to have) a healing or massage business and wants to add Reiki to their practice
- Anyone who is interested in growing their spiritual and wellness path
- Anyone who wants to offer Reiki to their pet, pet clients or shelter pets.
Class Schedule
When clicking on the payment link, you will be prompted to type in the fee appropriate for the class.
|Erik Class
|Reiki Level One
|March 28, 2020
|$195 ($175 if registered 30 days in advance)
|Reiki Level Two (Reiki One is a pre-requisite)
|April 3, 2020
|$225 ($200 if registered 30 days in advance)
|Reiki Level Three (Practitioner Only)
|Scheduled at the request of the student after meeting with me
|$350 ($315 if registered 45 days in advance)
|Reiki Level Three (Practitioner & Teacher)
|Scheduled at the request of the student after meeting with me
|$850 ($765 if registered 45 days in advance)
|Reiki for Animals (Reiki One is a pre-requisite)
|March 29, 2020
|$180 ($162 if registered 30 days in advance)
|Combo: Reiki Level One & Reiki for Animals (discount for both classes)
|March 28-29, 2020
|$360 ($325 if registered 30 days in advance)
|Special rate: Reiki Level One & Reiki for Animals class for animal protection professionals
|$300 special rate if registered 30 days in advance)
"I am a Reiki Master and took [Reiki Level One] for certification purposes. It was an awesome class and I learned a lot. Highly recommend the class!" — Kathy (Middletown, Delaware)
"There isn't a lot out there on [Reiki for Animals] and it is quite different from Reiki on people. This class fills a definite need – and the fact that it is held in person with live animals – and not online – is a big plus!" – Gina (Springfield, VA)
"Allie was very patient, welcoming and provided a great learning environment. I enjoyed myself and looking forward to my next certification." -Brittany (Alexandria, Virginia)
Reiki first degree provided me with fundamentals of Reiki as well as important practical hands-on skills that were observed and tweaked with the help of Allie. I definitely feel much more prepared to try Reiki with my friends than I originally thought I would." — Charlotte (Arlington, Virginia)
'The information provided [in Reiki for Animals] was very comprehensive. It was great practicing on the cats, and the field trip to practice on the horses was the cherry on top!" – Nicole (Falls Church, VA)
"Reiki Level 1 and Reiki for Animals classes are absolutely wonderful! I honestly feel this training is transformational for me, for my pets, and for many others in the days and years to come. Allie explains the concepts and practical application in relatable terms. This knowledge is a fabulous tool to have in your tool kit. I humbly expect that it will continue to bring great benefit to my life, but also to others. Thanks Allie!" — Patricia (Alexandria, Virginia)
"Allie has an abundance of knowledge and presents the information in a very thoughtful and interesting way. The hands on practice really rounds out the experience." — Jennifer S.(Alexandria, VA)
"[Reiki One] was a great introduction to Reiki and a great blend of discussion and "doing". Allie created a positive, professional, inclusive learning environment and she was open to and positively responsive to questions. This class exceeded my expectations." — Jennifer W. (Alexandria, VA)
"I felt very comfortable with the design and progression of Reiki First Degree class. I learned so much in one day." — Julie (Alexandria, Virginia)
"Being able to work with different animals during class was incredibly beneficial. Learning by doing." — Julie (Alexandria, Virginia)
"Reiki Two class is another transformational experience. I am thrilled to incorporate my new-found knowledge into my life" — Pat (Alexandria, VA)
"Reiki Two taught me how to listen to my own intuition and combine healing modalities to help myself, my animals and others." — Julie (Alexandria, VA)


text:
California Healthline: Fragile, Rural Population About To Be Moved Into Medi-Cal Managed Care
by David Gorn
Next month, state health officials will launch a transition of rural Medi-Cal beneficiaries into Medi-Cal managed care health plans.
Medi-Cal is California's Medicaid program.
The transition involves about 20,000 of the most frail and elderly segment of the rural Medi-Cal population — seniors and persons with disabilities, known as SPDs.
"Most of them have a disability or high levels of functional impairment," said Carrie Graham, assistant director of research at UC-Berkeley's Health Research for Action. "They have multiple chronic conditions, they need a lot of specialty care, they have a lot of prescriptions, they need medical equipment and supplies."
They're people who are on a precarious medical ledge — poor people with big medical needs, no Medicare benefits and a whisper-thin web of cobbled-together providers and services. It's the type of population that has a hard time with transitions, Graham said.
Continue reading here: http://www.californiahealthline.org/insight/2014/fragile-rural-population-about-to-be-moved-into-medical-managed-care


text:
To limp or to fly?
"How do you manage to take a bath?"
I don't know how many times that question has been asked the past several days and I wish I have counted them. Then I would have known which is more important to other people, how to a take bath or how to fit into my usual tight pants, given my "situation."
Ever since the accident, my life has taken a different turn. No, the accident was not life-threatening at all, or at least that was what those who saw it have told me. Things just suddenly felt heavier, and a little more difficult. Sometimes there are incidents, or unwanted events that make you rethink your entire existence. This was one of them.
No day could be more vivid in my memory than that day. I woke up feeling as if the whole world was at my feet. The New Year had given me signs that I was starting on the right foot. I was given the opportunity that I have been hoping for some time. I had my whole week planned out; a few adjustments here and there on my list of to-dos and I'd just be breezing through the days. I was starting that Wednesday morning just like any other rare positive day.
I was alone and on my way to work. Just a few blocks away from our house, I got off the tricycle and started walking briskly toward where I would catch a jeepney. I was halfway across, when the thing hit me.
My life stopped very briefly -- some 10 seconds or so. When I became conscious, I felt like a 50-pound brick had fallen on my left leg. I could not move it. Either my nerves had turned numb or the pain was just too much that I could not tell what I was feeling. I was already crying when it occurred to me that I had been hit by a speeding motorcycle.
My knee was bleeding. A patch of denim was ripped from one knee. Everyone around was probably stunned because it took them a few minutes to move to help a girl who was lying face down on the service road in Parañaque City, with one leg immobilized.
One tricycle driver called another to help pull me off the road and bring me to the nearest hospital, just a few meters away from where we were.
I was almost hysterical. The last thing I wanted was to be moved, which was sheer torture. The trip to the hospital was the longest five minutes of my life.
As I was being brought to the hospital, I heard that the rider who had hit me was helping carry me there. I wished I could lay my hands on something to throw at him. But my arms kept rubbing my leg, and my mind just wandered.
As I type this, I am trying my best not to think about how itchy it feels inside my plaster cast. My foot is sending signals to my brain that only a small amount of blood is flowing underneath it.
The doctor told me it would take only a month before my leg can breathe and I can walk, dance and run again. But for now, a month is like forever.
I reported to work one day, but my boss advised me to take a leave, get some rest and recover. I told her that being unable to work, and having more moments to ponder the pain of being temporarily crippled would kill me.
I am getting used to the jeers of colleagues who think the way I walk is funny. The more immature ones even imitate me, and walk like an amputee. And yes, almost everyone has asked me how I manage to bathe myself.
An even more impertinent question thrown at me was: How could you have sex with a cast? My simple answer to the stupid question: If there's a will, there's a way.
I was never asked how all this has affected me. Or maybe even changed me. Nevertheless, I would say I have been humbled by it.
Up to now, my family is still searching for the rider who hit me because he disappeared after I was transferred to San Juan De Dios Hospital. But I have resigned myself to the fact that we would not find him. I know God sees everything and that He saw what happened. If the guy would not be able to pay for the hospital bills, so be it. Every night I thank the Lord that I am still alive. I got my second chance to make a difference.
Isn't the fact that I will get to use my leg again just grand? During the first few days when I was in pain, physically and emotionally, I complained and sulked over my misfortune.
But now, I know He allow things to happen for a reason. I don't have my own car or driver to bring or fetch me to and from work. I have to endure the agonizing journey, feeling every bump below my foot, getting flashes of what happened, dreading the sight of motorcycles and hearing again the crashing sound. But I try to be strong. I tell myself that while I may be stable on just one foot now, God is holding me up on the other.
A few days ago, the management honored me with an award. It was the first award given for the year. It was called "Wowing Passion Award." We are a service company and one of the virtues we value most is passion.
Before the award was handed out to me, our HR manager said it was being given to someone who had become an inspiration to others in our workplace. He said my example showed that no one has a valid reason to feel exhausted or incapable of doing things.
I think God never gives us trials that we cannot overcome. When we are crippled, it is up to us whether to limp or to fly.
Tina Papera, 27, is a store marketing manager for Shakey's.
Copyright 2007 Inquirer. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


text:
How to Secure Instant Approval on Loans with No Guarantor?
March 27, 2017 | unsecured personal loans | No Comments
The nature of financial crisis varies from person to person. But in most cases, the reasons for going through the bad patch almost remain the same. With the rise in the numbers of people suffering from issues related to bad credit history, it is natural to have serious financial crunch. Resolving the issue is never easy, since you are not quite having the right credentials to source the desired funds. When you fail to qualify for any loan assistance, it becomes difficult to manage the various expenses. The ideal solution in these circumstances would be look for ways to source some cash relief that can address your needs. It is in this regard that you can consider the option of loans with no guarantor.
It is indeed possible to avail the loans at a short notice. However, to get the approval requires great deal of planning. This is precisely where you must prepare yourself by carefully covering all the bases. The fact that you are applying for loans with a lower credit rating certainly is a major concern. When you approach the loans with the right motive, then securing the approval will not be much of an issue.
By and large, your credit score or the fact that you are not in a position to arrange any guarantor do not in any manner influence the outcome of loans. Instead, whether you are in a position to afford the loans is what really counts.
Some Key Aspects to Ponder
In your pursuit to avail the services of loans without any guarantor, there are some basic elements that need to be taken into account. First of all, it is necessary to have a full time job and that your income should be stable enough. In addition to these, before giving the nod of approval, the lenders will make it a point to evaluate your circumstances. If you are in a position to abide by the terms and conditions, you will then easily qualify for the bad credit loans without any guarantor. It is only when you have access to a regular income source that you have a chance to avail the funds. In all likelihood, the approved amount will be small, which will help you to tackle the immediate expenses.
The repayment term is short and the interest rate charged tends to be a bit higher. Nevertheless, you are also getting an opportunity to secure some additional relief that lets you to tackle the needs. In a way, you do end up with viable funds, for which you have to pay a lot. A brief comparison of the various offers might help you to secure competitive offers on the loans. Timely repayment of the amount sourced further helps to improve the credit score.
Look for Online Deals
Despite the many hurdles, you will always show interest in acquiring the funds with least complicacies. In that case, you can surely apply online. By expanding your search online, you will eventually find a way to select the low cost deals that fit right into your budget. There is no paperwork and you can straightway fill the details in the application form. After the verification of the details, the lenders will then quickly disburse the amount in quick time.
Overall, the loans with no guarantor turn out to be a realistic alternative, which lets you avail quick funds, without letting your face too many complicacies.Bad Credit Loans without Any Guarantor, finance, online loans


text: Share: Comments Print September 25, 2012 at 5:52 PM Girls soccer: Mount Rainier Lutheran gets program's first win Posted by Jayson Jenks The Mount Rainier Lutheran Hawks picked up the program's first win against Mount Vernon Christian 7-3. And they did so while using only seven players compared to 10 from Mount Vernon Christian. Rachel Siltman scored four goals while Siri Johnson had five assists and a goal. Haley Rue scored her first goal of the season. Marie Vetter and Taylor Hoffman, who also scored a goal, combined to play goalie for the Hawks. Comments


text:
Makers Gonna Make Fleece HoodieMaker Valley
The Maker Valley Makers Gonna Make fleece hoodie features a hand-lettered "Makers gonna Make" in aqua and white on a heather black soft eco-fleece sweatshirt.
We create new products for creative makers (those who sew, quilt, embroider, knit, crochet, etc.) like this every month—follow Maker Valley on Instagram if you'd like to play along.
- Unisex
- Eco Fleece
- 50% Polyester, 46% Cotton, 4% Rayon
- Kangaroo Pocket
- Ribbed Hemband and Sleeve Cuffs
- Set In Sleeves
- Hoodie w/ Drawchords


text:
Anti-spoofing protection in Office 365
This article describes how Office 365 mitigates against phishing attacks that use forged sender domains, that is, domains that are spoofed. It accomplishes this by analyzing the messages and blocking the ones that cannot be authenticated using standard email authentication methods, nor other sender reputation techniques. This change was implemented to reduce the number of phishing attacks to which organizations in Office 365 are exposed.
This article also describes why this change is being made, how customers can prepare for this change, how to view messages that will be affected, how to report on messages, how to mitigate false positives, as well as how senders to Microsoft should prepare for this change.
Microsoft's anti-spoofing technology was initially deployed to its organizations that had an Office 365 Enterprise E5 subscription or had purchased the Office 365 Advanced Threat Protection (ATP) add-on for their subscription. As of October, 2018 we extended the protection to organizations that have Exchange Online Protection (EOP) as well. Additionally, because of the way all of our filters learn from each other, Outlook.com users may also be affected.
How spoofing is used in phishing attacks
When it comes to protecting its users, Microsoft takes the threat of phishing seriously. One of the techniques that spammers and phishers commonly use is spoofing, which is when the sender is forged, and a message appears to originate from someone or somewhere other than the actual source. This technique is often used in phishing campaigns designed to obtain user credentials. Microsoft's Anti-spoof technology specifically examines forgery of the 'From: header' which is the one that shows up in an email client like Outlook. When Microsoft has high confidence that the From: header is spoofed, it identifies the message as a spoof.
Spoofing messages have two negative implications for real life users:
1. Spoofed messages deceive users
First, a spoofed message may trick a user into clicking a link and giving up their credentials, downloading malware, or replying to a message with sensitive content (the latter of which is known as Business Email Compromise). For example, the following is a phishing message with a spoofed sender of email@example.com:
The above did not actually come from service.outlook.com, but instead was spoofed by the phisher to make it look like it did. It is attempting to trick a user into clicking the link within the message.
The next example is spoofing contoso.com:
The message looks legitimate, but in fact is a spoof. This phishing message is a type of Business Email Compromise which is a subcategory of phishing.
2. Users confuse real messages for fake ones
Second, spoofed messages create uncertainty for users who know about phishing messages but cannot tell the difference between a real message and spoofed one. For example, the following is an example of an actual password reset from the Microsoft Security account email address:
The above message did come from Microsoft, but at the same time, users are used to getting phishing messages that may trick a user into clicking a link and giving up their credentials, downloading malware, or replying to a message with sensitive content. Because it is difficult to tell the difference between a real password reset and a fake one, many users ignore these messages, report them as spam, or unnecessarily report the messages back to Microsoft as missed phishing scams.
To stop spoofing, the email filtering industry has developed email authentication protocols such as SPF, DKIM, and DMARC. DMARC prevents spoofing from examining a message's sender. That is, the sender that users see in their email client (in the examples above it is service.outlook.com, outlook.com, and accountprotection.microsoft.com). Furthermore, users can also see that the domain has passed SPF or DKIM, which means that the domain has been authenticated and is therefore not spoofed. For a more complete discussion, see the section "Understanding why email authentication is not always enough to stop spoofing" later on in this article.
However, the problem is that email authentication records are optional, not required. Therefore, while domains with strong authentication policies like microsoft.com and skype.com are protected from spoofing, domains that publish weaker authentication policies, or no policy at all, are targets for being spoofed.As of March 2018, only 9% of domains of companies in the Fortune 500 publish strong email authentication policies. The remaining 91% may be spoofed by a phisher, and unless the email filter detects it using another policy, may be delivered to an end user and deceive them:
The proportion of small-to-medium sized companies that are not in the Fortune 500 that publish strong email authentication policies is smaller, and smaller still for domains that are outside of North America and western Europe.
This is a big problem because while enterprises may not be aware of how email authentication works, phishers do understand and take advantage of the lack of it.
For information on setting up SPF, DKIM, and DMARC, see the section "Customers of Office 365" later on in this document.
Stopping spoofing with implicit email authentication
Because phishing and spear phishing is such a problem, and because of the limited adoption of strong email authentication policies, Microsoft continues to invest in capabilities to protect its customers. Therefore, Microsoft is moving ahead with implicit email authentication - if a domain doesn't authenticate, Microsoft will treat it as if it had published email authentication records and treat it accordingly if it doesn't pass.
To accomplish this, Microsoft has built numerous extensions to regular email authentication including sender reputation, sender/recipient history, behavioral analysis, and other advanced techniques. A message sent from a domain that doesn't publish email authentication will be marked as spoof unless it contains other signals to indicate that it is legitimate.
By doing this, end users can have confidence that an email sent to them has not been spoofed, senders can be confident that nobody is impersonating their domain, and customers of Office 365 can offer even better protection such as Impersonation protection.
To see Microsoft's general announcement, see A Sea of Phish Part 2 - Enhanced Anti-spoofing in Office 365.
Identifying that a message is classified as spoofed
Composite authentication
While SPF, DKIM, and DMARC are all useful by themselves, they don't communicate enough authentication status in the event a message has no explicit authentication records. Therefore, Microsoft has developed an algorithm that combines multiple signals into a single value called Composite Authentication, or compauth for short. Customers in Office 365 have compauth values stamped into the Authentication-Results header in the message headers.
compauth=<fail|pass|softpass|none> reason=<yyy>
|CompAuth result
|Message failed explicit authentication (sending domain published records explicitly in DNS) or implicit authentication (sending domain did not publish records in DNS, so Office 365 interpolated the result as if it had published records).
|Message passed explicit authentication (message passed DMARC, or Best Guess Passed DMARC) or implicit authentication with high confidence (sending domain does not publish email authentication records, but Office 365 has strong backend signals to indicate the message is likely legitimate).
|Message passed implicit authentication with low-to-medium confidence (sending domain does not publish email authentication, but Office 365 has backend signals to indicate the message is legitimate but the strength of the signal is weaker).
|Message did not authenticate (or it did authenticate but did not align), but composite authentication not applied due to sender reputation or other factors.
|Message failed composite authentication.
000 means the message failed DMARC with an action of reject or quarantine.
001 means the message failed implicit email authentication. This means that the sending domain did not have email authentication records published, or if they did, they had a weaker failure policy (SPF soft fail or neutral, DMARC policy of p=none).
002 means the organization has a policy for the sender/domain pair that is explicitly prohibited from sending spoofed email, this setting is manually set by an administrator.
010 means the message failed DMARC with an action of reject or quarantine, and the sending domain is one of your organization's accepted-domains (this is part of self-to-self, or intra-org, spoofing).
|1xx, 2xx, 3xx, 4xx, and 5xx
|Correspond to various internal codes for why a message passed implicit authentication, or had no authentication but no action was applied.
|Means the message failed implicit email authentication, and the sending domain is one of your organization's accepted domains (this is part of self-to-self, or intra-org, spoofing).
By looking at the headers of a message, an administrator or even an end user can determine how Office 365 arrives at the conclusion that the sender may be spoofed.
Differentiating between different types of spoofing
Microsoft differentiates between two different types of spoofing messages:
Intra-org spoofing
Also known as self-to-self spoofing, this occurs when the domain in the From: address is the same as, or aligns with, the recipient domain (when recipient domain is one of your organization's Accepted Domains); or, when the domain in the From: address is part of the same organization.
For example, the following has sender and recipient from the same domain (contoso.com). Spaces are inserted into the email address to prevent spambot harvesting on this page):
From: sender @ contoso.com
To: recipient @ contoso.com
The following has the sender and recipient domains aligning with the organizational domain (fabrikam.com):
From: sender @ foo.fabrikam.com
To: recipient @ bar.fabrikam.com
The following sender and recipient domains are different (microsoft.com and bing.com), but they belong to the same organization (that is, both are part of the organization's Accepted Domains):
From: sender @ microsoft.com
To: recipient @ bing.com
Messages that fail intra-org spoofing contain the following values in the headers:
X-Forefront-Antispam-Report: ...CAT:SPM/HSPM/PHSH;...SFTY:9.11
The CAT is the category of the message, and it is normally stamped as SPM (spam), but occasionally may be HSPM (high confidence spam) or PHISH (phishing) depending upon what other types of patterns occur in the message.
The SFTY is the safety level of the message, the first digit (9) means the message is phishing, and second set of digits after the dot (11) means it is intra-org spoofing.
There is no specific reason code for Composite Authentication for intra-org spoofing, that will be stamped later in 2018 (timeline not yet defined).
Cross-domain spoofing
This occurs when the sending domain in the From: address is an external domain to the receiving organization. Messages that fail Composite Authentication due to cross-domain spoofing contain the following values in the headers:
Authentication-Results: … compauth=fail reason=000/001
X-Forefront-Antispam-Report: ...CAT:SPOOF;...SFTY:9.22
In both cases, the following red safety tip is stamped in the message, or an equivalent that is customized to the recipient mailbox's language:
It's only by looking at the From: address and knowing what your recipient email is, or by inspecting the email headers, that you can differentiate between intra-org and cross-domain spoofing.
How customers of Office 365 can prepare themselves for the new anti-spoofing protection
Information for administrators
As an administrator of an organization in Office 365, there are several key pieces of information you should be aware of.
Understanding why email authentication is not always enough to stop spoofing
The new anti-spoofing protection relies on email authentication (SPF, DKIM, and DMARC) to not mark a message as spoofing. A common example is when a sending domain has never published SPF records. If there are no SPF records or they are incorrectly set up, a sent message will be marked as spoofed unless Microsoft has back-end intelligence that says the message is legitimate.
For example, prior to anti-spoofing being deployed, a message may have looked like the following with no SPF record, no DKIM record, and no DMARC record:
Authentication-Results: spf=none (sender IP is 22.214.171.124)
smtp.mailfrom=example.com; contoso.com; dkim=none
(message not signed) header.d=none; contoso.com; dmarc=none
action=none header.from=example.com;
From: sender @ example.com
To: receiver @ contoso.com
After anti-spoofing, if you have Office 365 Enterprise E5, EOP, or ATP, the compauth value is stamped:
Authentication-Results: spf=none (sender IP is 184.108.40.206)
smtp.mailfrom=example.com; contoso.com; dkim=none
(message not signed) header.d=none; contoso.com; dmarc=none
action=none header.from=example.com; compauth=fail reason=001
From: sender @ example.com
To: receiver @ contoso.com
If example.com fixed this by setting up an SPF record but not a DKIM record, this would pass composite authentication because the domain that passed SPF aligned with the domain in the From: address:
Authentication-Results: spf=pass (sender IP is 220.127.116.11)
smtp.mailfrom=example.com; contoso.com; dkim=none
(message not signed) header.d=none; contoso.com; dmarc=bestguesspass
action=none header.from=example.com; compauth=pass reason=109
From: sender @ example.com
To: receiver @ contoso.com
Or, if they set up a DKIM record but not an SPF record, this would also pass composite authentication because the domain in the DKIM-Signature that passed aligned with the domain in the From: address:
Authentication-Results: spf=none (sender IP is 188.8.131.52)
smtp.mailfrom=example.com; contoso.com; dkim=pass
(signature was verified) header.d=outbound.example.com;
contoso.com; dmarc=bestguesspass action=none
header.from=example.com; compauth=pass reason=109
From: sender @ example.com
To: receiver @ contoso.com
However, a phisher may also set up SPF and DKIM and sign the message with their own domain, but specify a different domain in the From: address. Neither SPF nor DKIM requires the domain to align with the domain in the From: address, so unless example.com published DMARC records, this would not be marked as a spoof using DMARC:
Authentication-Results: spf=pass (sender IP is 22.214.171.124)
smtp.mailfrom=maliciousDomain.com; contoso.com; dkim=pass
(signature was verified) header.d=maliciousDomain.com;
contoso.com; dmarc=none action=none header.from=example.com;
From: sender @ example.com
To: receiver @ contoso.com
In the email client (Outlook, Outlook on the web, or any other email client), only the From: domain is displayed, not the domain in the SPF or DKIM, and that can mislead the user into thinking the message came from example.com, but actually came from maliciousDomain.com.
For that reason, Office 365 requires that the domain in the From: address aligns with the domain in the SPF or DKIM signature, and if it doesn't, contains some other internal signals that indicates that the message is legitimate. Otherwise, the message would be a compauth fail.
Authentication-Results: spf=none (sender IP is 220.127.116.11)
smtp.mailfrom=maliciousDomain.com; contoso.com; dkim=pass
(signature was verified) header.d=maliciousDomain.com;
contoso.com; dmarc=none action=none header.from=contoso.com;
compauth=fail reason=001
From: firstname.lastname@example.com
To: email@example.com
Thus, Office 365 anti-spoofing protects against domains with no authentication, and against domains who set up authentication but mismatch against the domain in the From: address as that is the one that the user sees and believes is the sender of the message. This is true both of domains external to your organization, as well as domains within your organization.
Therefore, if you ever receive a message that failed composite authentication and is marked as spoofed, even though the message passed SPF and DKIM, it's because the domain that passed SPF and DKIM are not aligned with the domain in the From: address.
Understanding changes in how spoofed emails are treated
Currently, for all organizations in Office 365 - ATP and non-ATP - messages that fail DMARC with a policy of reject or quarantine are marked as spam and usually take the high confidence spam action, or sometimes the regular spam action (depending on whether other spam rules first identify it as spam). Intra-org spoof detections take the regular spam action. This behavior does not need to be enabled, nor can it be disabled.
However, for cross-domain spoofing messages, before this change they would go through regular spam, phish, and malware checks and if other parts of the filter identified them as suspicious, would mark them as spam, phish, or malware respectively. With the new cross-domain spoofing protection, any message that can't be authenticated will, by default, take the action defined in the Anti-phishing > Anti-spoofing policy. If one is not defined, it will be moved to a users Junk Email folder. In some cases, more suspicious messages will also have the red safety tip added to the message.
This may result in some messages that were previously marked as spam still getting marked as spam but will now also have a red safety tip; in other cases, messages that were previously marked as non-spam will start getting marked as spam (CAT:SPOOF) with a red safety tip added. In still other cases, customers that were moving all spam and phish to the quarantine would now see them going to the Junk Mail Folder (this behavior can be changed, see Changing your anti-spoofing settings).
There are multiple different ways a message can be spoofed (see Differentiating between different types of spoofing earlier in this article) but as of March 2018 the way Office 365 treats these messages is not yet unified. The following table is a quick summary, with Cross-domain spoofing protection being new behavior:
|Type of spoof
|Safety tip added?
|Applies to
|DMARC fail (quarantine or reject)
|HSPM (default), may also be SPM or PHSH
|No (not yet)
|All Office 365 customers, Outlook.com
|All Office 365 organizations, Outlook.com
|Office 365 Advanced Threat Protection and E5 customers
Changing your anti-spoofing settings
To create or update your (cross-domain) anti-spoofing settings, navigate to the Anti-phishing > Anti-spoofing settings under the Threat Management > Policy tab in the Security & Compliance Center. If you have never created any anti-phishing settings, you will need to create one:
If you've already created one, you can select it to modify it:
Select the policy you just created and proceed through the steps as described in Learn more about spoof intelligence.
To create a new policy by using PowerShell:
$org = Get-OrganizationConfig
$name = "My first anti-phishing policy for " + $org.Name
# Note: The name should not exclude 64 characters, including spaces.
# If it does, you will need to pick a smaller name.
# Next, create a new anti-phishing policy with the default values
New-AntiphishPolicy -Name $Name
# Select the domains to scope it to
# Multiple domains are specified in a comma-separated list
$domains = "domain1.com, domain2.com, domain3.com"
# Next, create the anti-phishing rule, scope it to the anti-phishing rule
New-AntiphishRule -Name $name -AntiphishPolicy $name -RecipientDomainIs $domains
You may then modify the anti-phishing policy parameters using PowerShell, following the documentation at Set-AntiphishPolicy. You may specify the $name as a parameter:
Set-AntiphishPolicy -Identity $name <fill in rest of parameters>
Later in 2018, rather than you having to create a default policy, one will be created for you that is scoped to all the recipients in your organization so you don't have to specify it manually (the screenshots below are subject to change before the final implementation).
Unlike a policy that you create, you cannot delete the default policy, modify its priority, or choose which users, domains, or groups to scope it to.
To set up your default protection by using PowerShell:
$defaultAntiphishPolicy = Get-AntiphishPolicy | ? {$_.IsDefault -eq $true}
Set-AntiphishPolicy -Identity $defaultAntiphishPolicy.Name -EnableAntispoofEnforcement <$true|$false>
You should only disable anti-spoofing protection if you have another mail server or servers in front of Office 365 (see Legitimate scenarios to disable anti-spoofing for more details).
$defaultAntiphishPolicy = Get-AntiphishiPolicy | ? {$_.IsDefault $true}
Set-AntiphishPolicy -Identity $defaultAntiphishPolicy.Name -EnableAntispoofEnforcement $false
If the first hop in your email path is Office 365, and you are getting too many legitimate emails marked as spoof, you should first set up your senders that are allowed to send spoofed email to your domain (see the section "Managing legitimate senders who are sending unauthenticated email" ). If you are still getting too many false positives (that is, legitimate messages marked as spoof), we do NOT recommend disabling anti-spoofing protection altogether. Instead, we recommend choosing Basic instead of High protection. It is better to work through false positives than to expose your organization to spoofed email which could end up imposing significantly higher costs in the long term.
Managing legitimate senders who are sending unauthenticated email
Office 365 keeps track of who is sending unauthenticated email to your organization. If the service thinks the sender is not legitimate, it will mark it as a compauth failure. This will be classified as SPOOF although it depends on your anti-spoofing policy that was applied to the message.
However, as an administrator, you can specify which senders are permitted to send spoofed email, overriding Office 365's decision.
Method 1 - If your organization owns the domain, set up email authentication
This method can be used to resolve intra-org spoofing, and cross-domain spoofing in cases where you own or interact with multiple tenants. It also helps resolve cross-domain spoofing where you send to other customers within Office 365, and also third parties that are hosted in other providers.
For more details, see Customers of Office 365.
Method 2 - Use Spoof intelligence to configure permitted senders of unauthenticated email
You can also use Spoof Intelligence to permit senders to transmit unauthenticated messages to your organization.
For external domains, the spoofed user is the domain in the From address, while the sending infrastructure is either the sending IP address (divided up into /24 CIDR ranges), or the organizational domain of the PTR record (in the screenshot below, the sending IP might be 18.104.22.168 whose PTR record is outbound.mail.protection.outlook.com, and this would show up as outlook.com for the sending infrastructure).
To permit this sender to send unauthenticated email, change the No to a Yes.
You can also use PowerShell to allow specific sender to spoof your domain:
$file = "C:\My Documents\Summary Spoofed Internal Domains and Senders.csv"
Get-PhishFilterPolicy -Detailed -SpoofAllowBlockList -SpoofType External | Export-CSV $file
In the previous image, additional line breaks have been added to make this screenshot fit. Normally, all the values would appear on a single line.
Edit the file and look for the line that corresponds to outlook.com and bing.com, and change the AllowedToSpoof entry from No to Yes:
Save the file, and then run:
$UpdateSpoofedSenders = Get-Content -Raw "C:\My Documents\Spoofed Senders.csv"
Set-PhishFilterPolicy -Identity Default -SpoofAllowBlockList $UpdateSpoofedSenders
This will now allow bing.com to send unauthenticated email from *.outlook.com.
Method 3 - Create an allow entry for the sender/recipient pair
You can also choose to bypass all spam filtering for a particular sender. For more details, see How to securely add a sender to an allow list in Office 365.
If you use this method, it will skip spam and some of the phish filtering, but not malware filtering.
Method 4 - Contact the sender and ask them to set up email authentication
Because of the problem of spam and phishing, Microsoft recommends all senders set up email authentication. If you know an administrator of the sending domain, contact them and request that they set up email authentication records so you do not have to add any overrides. For more information, see Administrators of domains that are not Office 365 customers" later in this article.
While it may be difficult at first to get sending domains to authenticate, over time, as more and more email filters start junking or even rejecting their email, it will cause them to set up the proper records to ensure better delivery.
Viewing reports of how many messages were marked as spoofed
Once your anti-spoofing policy is enabled, you can use threat investigation and response capabilities to get numbers around how many messages are marked as phish. To do this, go into the Security & Compliance Center (SCC) under Threat Management > Explorer, set the View to Phish, and group by Sender Domain or Protection Status:
You can interact with the various reports to see how many were marked as phishing, including messages marked as SPOOF. To learn more, see Get started with Office 365 Threat investigation and response.
You can't yet split out which messages were marked due to spoofing as opposed to other types of phishing (general phishing, domain or user impersonation, and so on). However, later, you will be able to do this through the Security & Compliance Center. Once you do, you can use this report as a starting place to identify sending domains that may be legitimate that are being marked as spoof due to failing authentication.
The following screenshot is a proposal for how this data will look, but may change when released:
For non-ATP and E5 customers, these reports will be available later under the Threat Protection Status (TPS) reports, but will be delayed by at least 24 hours. This page will be updated as they are integrated into the Security & Compliance Center.
Predicting how many messages will be marked as spoof
Once Office 365 updates its settings to let you turn the anti-spoofing enforcement Off, or on with Basic or High enforcement, you will be given the ability to see how message disposition will change at the various settings. That is, if anti-spoofing is Off, you will be able to see how many messages will be detected as Spoof if you turn to Basic; or, if it's Basic, you will be able to see how many more messages will be detected as Spoof if you turn it to High.
This feature is currently under development. As more details are defined, this page will be updated both with screenshots of the Security and Compliance Center, and with PowerShell examples.
Legitimate scenarios to disable anti-spoofing
Anti-spoofing better protects customers from phishing attacks, and therefore disabling anti-spoofing protection is strongly discouraged. By disabling it, you may resolve some short-term false positives, but long term you will be exposed to more risk. The cost for setting up authentication on the sender side, or making adjustments in the phishing policies, are usually one-time events or require only minimal, periodic maintenance. However, the cost to recover from a phishing attack where data has been exposed, or assets have been compromised is much higher.
For this reason, it is better to work through anti-spoofing false positives than to disable anti-spoof protection.
However, there is a legitimate scenario where anti-spoofing should be disabled, and that is when there are additional mail-filtering products in the message routing, and Office 365 is not the first hop in the email path:
The other server may be an Exchange on-premises mail server, a mail filtering device such as Ironport, or another cloud hosted service.
If the MX record of the recipient domain does not point to Office 365, then there is no need to disable anti-spoofing because Office 365 looks up your receiving domain's MX record and suppresses anti-spoofing if it points to another service. If you don't know if your domain has another server in front, you can use a website like MX Toolbox to look up the MX record. It might say something like the following:
This domain has an MX record that does not point to Office 365, so Office 365 would not apply anti-spoofing enforcement.
However, if the MX record of the recipient domain does point to Office 365, even though there is another service in front of Office 365, then you should disable anti-spoofing. The most common example is through the use of a recipient rewrite:
The domain contoso.com's MX record points to the on-premises server, while the domain @office365.contoso.net's MX record points to Office 365 because it contains *.protection.outlook.com, or *.eo.outlook.com in the MX record:
Be sure to differentiate when a recipient domain's MX record does not point to Office 365, and when it has undergone a recipient rewrite. It is important to tell the difference between these two cases.
If you are unsure whether or not your receiving domain has undergone a recipient-rewrite, sometimes you can tell by looking at the message headers.
a) First, look at the headers in the message for the recipient domain in the Authentication-Results header:
Authentication-Results: spf=fail (sender IP is 220.127.116.11)
smtp.mailfrom=example.com; office365.contoso.net; dkim=fail
(body hash did not verify) header.d=simple.example.com;
office365.contoso.net; dmarc=none action=none
header.from=example.com; compauth=fail reason=001
The recipient domain is found in the bold red text above, in this case office365.contoso.net. This may be different that the recipient in the To: header:
To: Example Recipient <recipient @ contoso.com>
Perform an MX-record lookup of the actual recipient domain. If it contains *.protection.outlook.com, mail.messaging.microsoft.com, *.eo.outlook.com, or mail.global.frontbridge.com, that means that the MX points to Office 365.
If it does not contain those values, then it means that the MX does not point to Office 365. One tool you can use to verify this is MX Toolbox.
For this particular example, the following says that contoso.com, the domain that looks like the recipient since it was the To: header, has MX record points to an on-prem server:
However, the actual recipient is office365.contoso.net whose MX record does point to Office 365:
Therefore, this message has likely undergone a recipient-rewrite.
b) Second, be sure to distinguish between common use cases of recipient rewrites. If you are going to rewrite the recipient domain to *.onmicrosoft.com, instead rewrite it to *.mail.onmicrosoft.com.
Once you have identified the final recipient domain that is routed behind another server and the recipient domain's MX record actually points to Office 365 (as published in its DNS records), you may proceed to disable anti-spoofing.
Remember, you don't want to disable anti-spoofing if the domain's first hop in the routing path is Office 365, only when it's behind one or more services.
How to disable anti-spoofing
If you already have an Anti-phishing policy created, set the EnableAntispoofEnforcement parameter to $false:
$name = "<name of policy>"
Set-AntiphishPolicy -Identity $name -EnableAntiSpoofEnforcement $false
If you don't know the name of the policy (or policies) to disable, you can display them:
Get-AntiphishPolicy | fl Name
If you don't have any existing anti-phishing policies, you can create one and then disable it (even if you don't have a policy, anti-spoofing is still applied; later on in 2018, a default policy will be created for you and you can then disable that instead of creating one). You will have to do this in multiple steps:
$org = Get-OrganizationConfig
$name = "My first anti-phishing policy for " + $org.Name
# Note: If the name is more than 64 characters, you will need to choose a smaller one
# Next, create a new anti-phishing policy with the default values
New-AntiphishPolicy -Name $Name
# Select the domains to scope it to
# Multiple domains are specified in a comma-separated list
$domains = "domain1.com, domain2.com, domain3.com"
# Next, create the anti-phishing rule, scope it to the anti-phishing rule
New-AntiphishRule -Name $name -AntiphishPolicy -RecipientDomainIs $domains
# Finally, scope the anti-phishing policy to the domains
Set-AntiphishPolicy -Identity $name -EnableAntispoofEnforcement $false
Disabling anti-spoofing is only available via cmdlet (later it will be available in the Security & Compliance Center). If you do not have access to PowerShell, create a support ticket.
Remember, this should only be applied to domains that undergo indirect routing when sent to Office 365. Resist the temptation to disable anti-spoofing because of some false positives, it will be better in the long run to work through them.
Information for individual users
Individual users are limited in how they can interact with the anti-spoofing safety tip. However, there are several things you can do to resolve common scenarios.
Common scenario #1 - Discussion lists
Discussion lists are known to have problems with anti-spoofing due to the way they forward the message and modify its contents yet retain the original From: address.
For example, suppose your email address is user @ contoso.com, and you are interested in Bird Watching and join the discussion list birdwatchers @ example.com. When you send a message to the discussion list, you might send it this way:
From: John Doe <user @ contoso.com>
To: Birdwatcher's Discussion List <birdwatchers @ example.com>
Subject: Great viewing of blue jays at the top of Mt. Rainier this week
Anyone want to check out the viewing this week from Mt. Rainier?
When the email list receives the message, they format the message, modify its contents, and replay it to the rest of the members on the discussion list which is made up of participants from many different email receivers.
From: John Doe <user @ contoso.com>
To: Birdwatcher's Discussion List <birdwatchers @ example.com>
Subject: [BIRDWATCHERS] Great viewing of blue jays at the top of Mt. Rainier this week
Anyone want to check out the viewing this week from Mt. Rainier?
This message was sent to the Birdwatchers Discussion List. You can unsubscribe at any time.
In the above, the replayed message has the same From: address (user @ contoso.com) but the original message has been modified by adding a tag to the Subject line, and a footer to the bottom of the message. This type of message modification is common in mailing lists, and may result in false positives.
If you or someone in your organization is an administrator of the mailing list, you may be able to configure it to pass anti-spoofing checks.
Check the FAQ at DMARC.org: I operate a mailing list and I want to interoperate with DMARC, what should I do?
Read the instructions at this blog post: A tip for mailing list operators to interoperate with DMARC to avoid failures
Consider installing updates on your mailing list server to support ARC, see https://arc-spec.org
If you do not have ownership of the mailing list:
You can request the maintainer of the mailing list to implement one of the options above (they should also have email authentication set up for the domain the mailing list is relaying from)
You can create mailbox rules in your email client to move messages to the Inbox. You can also request your organization's administrators to set up allow rules, or overrides as discussed in the section Managing legitimate senders who are sending unauthenticated email
You can create a support ticket with Office 365 to create an override for the mailing list to treat it as legitimate
Other scenarios
If neither of the above common scenarios applies to your situation, report the message as a false positive back to Microsoft. For more information, see the section How can I report spam or non-spam messages back to Microsoft? later in this article.
You may also contact your email administrator who can raise it as a support ticket with Microsoft. The Microsoft engineering team will investigate why the message was marked as a spoof.
Additionally, if you know who the sender is and are confident they are not being maliciously spoofed, you may reply back to the sender indicating that they are sending messages from a mail server that does not authenticate. This sometimes results in the original sender contacting their IT administrator who will set up the required email authentication records.
When enough senders reply back to domain owners that they should set up email authentication records, it spurs them into taking action. While Microsoft also works with domain owners to publish the required records, it helps even more when individual users request it.
- Optionally, add the sender to your Safe Senders list. However, be aware that if a phisher spoofs that account, it will be delivered to your mailbox. Therefore, this option should be used sparingly.
How senders to Microsoft should prepare for anti-spoofing protection
If you are an administrator who currently sends messages to Microsoft, either Office 365 or Outlook.com, you should ensure that your email is properly authenticated otherwise it may be marked as spam or phish.
Customers of Office 365
If you are an Office 365 customer and you use Office 365 to send outbound email:
For your domains, Set up SPF in Office 365 to help prevent spoofing
For your primary domains, Use DKIM to validate outbound email sent from your custom domain in Office 365
Consider setting up DMARC records for your domain to determine who are your legitimate senders
Microsoft does not provide detailed implementation guidelines for each of SPF, DKIM, and DMARC. However, there is a lot of information published online. There are also 3rd party companies dedicated to helping your organization set up email authentication records.
Administrators of domains that are not Office 365 customers
If you are a domain administrator but are not an Office 365 customer:
You should set up SPF to publish your domain's sending IP addresses, and also set up DKIM (if available) to digitally sign messages. You may also consider setting up DMARC records.
If you have bulk senders who are transmitting email on your behalf, you should work with them to send email in a way such that the sending domain in the From: address (if it belongs to you) aligns with the domain that passes SPF or DMARC.
If you have on-premises mail servers, or send from a Software-as-a-service provider, or from a cloud-hosting service like Microsoft Azure, GoDaddy, Rackspace, Amazon Web Services, or similar, you should ensure that they are added to your SPF record.
If you are a small domain that is hosted by an ISP, you should set up your SPF record according to the instructions that is provided to you by your ISP. Most ISPs provide these types of instructions and can be found on the company's support pages.
Even if you have not had to publish email authentication records before, and it worked fine, you must still publish email authentication records to send to Microsoft. By doing so, you are helping in the fight against phishing, and reducing the possibility that either you, or organizations you send to, will get phished.
What if you don't know who sends email as your domain?
Many domains do not publish SPF records because they do not know who all their senders are. That's okay, you do not need to know who all of them are. Instead, you should get started by publishing an SPF record for the ones you do know of, especially where your corporate traffic is located, and publish a neutral SPF policy, ?all:
example.com IN TXT "v=spf1 include:spf.example.com ?all"
The neutral SPF policy means that any email that comes out of your corporate infrastructure will pass email authentication at all other email receivers. Email that comes from senders you don't know about will fall back to neutral, which is almost the same as publishing no SPF record at all.
When sending to Office 365, email that comes from your corporate traffic will be marked as authenticated, but the email that comes from sources you don't know about may still be marked as spoof (depending upon whether or not Office 365 can implicitly authenticate it). However, this is still an improvement from all email being marked as spoof by Office 365.
Once you've gotten started with an SPF record with a fallback policy of ?all, you can gradually include more and more sending infrastructure and then publish a stricter policy.
What if you are the owner of a mailing list?
See the section Common scenario #1 - Discussion lists.
What if you are an infrastructure provider such as an Internet Service Provider (ISP), Email Service Provider (ESP), or cloud hosting service?
If you host a domain's email, and it sends email, or provide hosting infrastructure that can send email, you should do the following:
Ensure your customers have documentation detailing what to publish in their SPF records
Consider signing DKIM-signatures on outbound email even if the customer doesn't explicitly set it up (sign with a default domain). You can even double-sign the email with DKIM signatures (once with the customer's domain if they have set it up, and a second time with your company's DKIM signature)
Deliverability to Microsoft is not guaranteed even if you authenticate email originating from your platform, but at least it ensures that Microsoft does not junk your email because it is not authenticated. For more details around how Outlook.com filters email, see the Outlook.com Postmaster page.
For more details on service providers best practices, see M3AAWG Mobile Messaging Best Practices for Service Providers.
Frequently Asked Questions
Why is Microsoft making this change?
Because of the impact of phishing attacks, and because email authentication has been around for over 15 years, Microsoft believes that the risk of continue to allow unauthenticated email is higher than the risk of losing legitimate email.
Will this change cause legitimate email to be marked as spam?
At first, there will be some messages that are marked as spam. However, over time, senders will adjust and then the amount of messages mislabeled as spoofed will be negligible for most email paths.
Microsoft itself first adopted this feature several weeks before deploying it to the rest of its customers. While there was disruption at first, it gradually declined.
Will Microsoft bring this feature to Outlook.com and non-Advanced Threat Protection customers of Office 365?
Microsoft's anti-spoofing technology was initially deployed to its organizations that had an Office 365 Enterprise E5 subscription or had purchased the Office 365 Advanced Threat Protection (ATP) add-on for their subscription. As of October, 2018 we've extended the protection to organizations that have Exchange Online Protection (EOP) as well. In the future, we may release it for Outlook.com. However, if we do, there may be some capabilities that are not applied such as reporting and custom overrides.
How can I report spam or non-spam messages back to Microsoft?
You can either use the Report Message Add-in for Outlook, or if it isn't installed, Submit spam, non-spam, and phishing scam messages to Microsoft for analysis.
I'm a domain administrator who doesn't know who all my senders are!
Please see Administrators of domains that are not Office 365 customers.
What happens if I disable anti-spoofing protection for my organization, even though Office 365 is my primary filter?
We do not recommend this because you will be exposed to more missed phishing and spam messages. Not all phishing is spoofing, and not all spoofs will be missed. However, your risk will be higher than a customer who enables anti-spoofing.
Does enabling anti-spoofing protection mean I will be protected from all phishing?
Unfortunately, no, because phishers will adapt to use other techniques such as compromised accounts, or setting up accounts of free services. However, anti-phishing protection works much better to detect these other types of phishing methods because Office 365's protection layers are designed work together and build on top of each other.
Do other large email receivers block unauthenticated email?
Nearly all large email receivers implement traditional SPF, DKIM, and DMARC. Some receivers have other checks that are more strict than just those standards, but few go as far as Office 365 to block unauthenticated email and treat them as a spoof. However, most of the industry is becoming more and more strict about this particular type of email, particularly because of the problem of phishing.
Do I still need the Advanced Spam Filtering option enabled for "SPF Hard Fail" if I enable anti-spoofing?
No, this option is no longer required because the anti-spoofing feature not only considers SPF hard fails, but a much wider set of criteria. If you have anti-spoofing enabled and the SPF Hard Fail option enabled, you will probably get more false positives. We recommend disabling this feature as it would provide almost no additional catch for spam or phish, and instead generate mostly false positives.
Does Sender Rewriting Scheme (SRS) help fix forwarded email?
SRS only partially fixes the problem of forwarded email. By rewriting the SMTP MAIL FROM, SRS can ensure that the forwarded message passes SPF at the next destination. However, because anti-spoofing is based upon the From: address in combination with either the MAIL FROM or DKIM-signing domain (or other signals), it is not enough to prevent forwarded email from being marked as spoofed.
Loading feedback...