Guidance - Protect domains that do not send email. Interesting that it's from the UK Government. I've got policies in place for my domains and this one in particular still gets hit with Joe-Job attacks even thought I have everything set to "deny if not from my originating IP". I do however have a couple other domains that are not sending email at all, maybe I should run through this process on those...