Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Where to set up DKIM, DMARC, SPF Records
#1
I read through http://inboxfringe.com:8080/email-deliverability and found it quite helpful for explaining the purpose of each but don't know how to go about setting them up. Is this done on the server side? Any how-to resources for this?
Reply
#2
(01-17-2018, 08:24 PM)Kylemail Wrote: I read through http://inboxfringe.com:8080/email-deliverability and found it quite helpful for explaining the purpose of each but don't know how to go about setting them up. Is this done on the server side? Any how-to resources for this?

Setting up all three of these record types is done with your registrar (Place where you registered the domain). Companies that manage their own DNS records will add this information in their zone files.

For SPF Records you will add a TXT type record.
Here is a resource for the syntax.
http://www.openspf.org/SPF_Record_Syntax

DKIM is a little tougher. First you need to generate a private/public key pair. Port 25 has a little wizard that helps with this.
https://www.port25.com/dkim-wizard
Once you have the public/private key pair you will need to configure a DNS TXT record with the public key as part of the value and the selector as part of the name. The Port 25 wizard shows you the syntax in it's output.

For DMARC you create another TXT record that tells receiving MTA's what to do if SPF/DKIM fail.
Here is a wizard to generate the record.
https://www.agari.com/resources/tools/dm...m=referral

Clear as mud?
It can be hard at first but you'll get the hang of it.
I like to use this tool at first.
https://dmarcian.com/dmarc-inspector
You'll get reports from email service providers. The reports will have information about the email traffic they see from your domain. The tool parses the information in a nice human readable format.

Best of Luck!  Smile
Reply
#3
I'd like to add that you should make it so that the DMARC domain policy is set to none or quarantine until you verify that your records are set up right. Using the dmarcian.com inspector you should see reports and in those reports it will tell you if SPF/DKIM is failing and what percent of the time. Once you have verified everything to be working you can change your policy.
Reply
#4
I appreciate the step-by-step.  Bookmarking all those sites.
Reply
#5
Is setting up DKIM, DMARC, and SPF Records all required? Do I get just better delivery?
Reply
#6
Setting them up may give you better delivery but not a guarantee.
There are a ton of factors that go into delivery. These 3 items are a good start.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)