SPF , DKIM and DMARC Configuration
details about dermapenworld.com SPF DKIM and DMARC Setup
SPF (Sender Policy Framework (SPF)) ref
SPF helps validate outbound email sent from your custom domain (is coming from who it says it is). It's a first step in setting up the full recommended email authentication methods of SPF, DKIM, and DMARC.
For dermapenworld.com our SPF is as follows –
TXT v=spf1 include:post.dearsystems.com include:spf.protection.outlook.com include:mailgun.org include:spf-au.emailsignatures365.com include:22206062.spf10.hubspotemail.net ip4:172.105.162.110 ip6:2400:8907::f03c:93ff:febb:07a6 -all
Breaking it down
|
Prefix |
Type |
Value |
PrefixDesc |
Description |
|
v |
spf1 |
The SPF record version |
||
|
+ |
include |
Pass |
Allows DEAR servers to send on ourbehalf as dermapenworld.com |
|
|
+ |
include |
Pass |
Allows Microsoft Outlook servers to send on our behalf as dermapenworld.com |
|
|
+ |
include |
Pass |
Allows Mailchimp servers to send on our behalf |
|
|
+ |
include |
Pass |
Allows CodeTwo Signatures send on our behalf |
|
|
+ |
include |
Pass |
Allows Hubspot servers send on our behalf |
|
|
+ |
ip4 |
172.105.162.110 |
Pass |
Australian IP hosted Service (Linode LLC) |
|
+ |
ip6 |
2400:8907::f03c:93ff:febb:07a6 |
Pass |
Australian IP hosted Service (Akamai) |
|
- |
all |
Fail |
Always matches. It goes at the end of your record. |
https://mxtoolbox.com/SuperTool.aspx?action=dmarc%3adermapenworld.com&run=toolpage
DKIM Keys for dermapenworld.com – created Hostname DNS records
For other services like shopify – CNAME records are created to repoint to shopify eg rom._domainkey à dkim1.c68737d53ecc.p20.email.myshopify.com
dkim:dermapenworld.com:s1
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbOCg+AbaCJqw7eXkWHPz5K1ee10OaPt0WKxiGQkzfOrEZ/fRWKO2M74H/4S6CRC8YwQ7bIziQWnnfwiV3rPiySTcKTYSKiWBAwwTvZBkF5shvEsr3RbGqDAbAoGW4D/vTZQhEijxAuq///4W+evPFQjF9sVC4vb2o13KdkATt/azu1nlP62yERk5OeZw7gPNVI5qC7xH9mRUW8VrgRWd3EeiwziHYYxrar0zdQaTwhbNNnOvcCF/MJXSixu/BIz0tgZnDGfUUqqedoH6IWnbGW2kyi5UkX3u1SguhxDl3VodazKdFtU0U20uKmKGiW9X22bAXU0owpoMow/921xWwIDAQAB
dkim:dermapenworld.com:s2
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqjyATcU6fHA0CEd2qF16og8TPuY4HhEHEO54m22P5WownTW1yVyhvCMak27/Ku8jDIlTdgPXr7JS4ZW5q7PbZuBcaMGwlvr/WRLdGVtWIlr/y7HQZqn1iLB/gA+vtVGON9Qw2yjf2ugQ7+YAJm4ZZd6blKybLe9FFQfXTwblK+PVpXplDxvM9AITFdFv/JW7T6MCTcpPzv1SooGILbbc0HJYjJBqg06NFAVCFCwShxm2XGX/GI70L2e8QyTbufjdGgTg02N6x9SZdKX5QOr2TQJ8hZO4M//weVQGUQ3TwKnrowHaspAnMHYBdvMLxs19GC7sKMueXUbYV83tiiqdwIDAQAB
DMARC
At the moment it is configured for monitoring – reports are sent to dmarc@dermapenworld.com – in there we can get xml reports showing who is using our domain to send. Once set p=reject it will cause anything none complaint to be deemed outside our allowed sender framework and dropped by other mail servers
Name - _dmarc.dermapenworld.com
Type - TXT
v=DMARC1; p=none; rua=mailto:dmarc@dermapenworld.com; ruf=mailto:dmarc@dermapenworld.com; sp=none; aspf=s; fo=0:1:d:s;
Ref links used were
MXtoolbox
https://mxtoolbox.com/SuperTool.aspx?action=dmarc%3adermapenworld.com&run=toolpage
https://mxtoolbox.com/SuperTool.aspx?action=dkim%3adermapenworld.com%3as2&run=toolpage