What is SPF , DKIM and DMARC record ?
SPF :
Sender Policy Framework set who can send the email from your domain name. Its set which server IP enable to send the email. All incoming emails of a IP are authorized by domain administrator.
When you send email then a "reply to" address mentioned so its easy for receiver to open it and reply it. "From" address some time not added by spammer or phishing.
Where To Add SPF Records?
To add SPF record you mention the SPF version, IP of domain, any other third party domain which allow to send and ending “all” tag in domain DNS setting under TXT record. You can mention IP4 and IP6 address also.
Example
v=spf1 a mx ip4:13.16.20.21 ip6:2a01:7e00::f03c:91ff:fe26:b0ec a:domainname.com ~all
v=spf1 This simply says version 1 of SPF is being used.
ip4:13.16.20.21 This is the IP4 address of the mail server and/or domain that’s allow to send email for that domain.
ip6:2a01:7e00::f03c:91ff:fe26:b0ec 21 This is the IP6 address of the mail server and/or domain that’s allow to send email for that domain.
a:domainname.com : authorized domain name to send email.
all – This tells the receiver domain about the headers . If server not found the domain name then it do the below task
- -all -- This is a hard fail means rejected by the receiving server.
- ~all -- This is a soft fail means message will be marked as possible spam.
- +all -- Any domain listed is authorized to send email, even if it’s not listed in the SPF record. Its not recommended.
DKIM Record
Its DomainKeys Identified Mail a TXT record which added into DNS record . Its means header of the email not changed like from address. If not found then last receiver stop the process.
Its basically a encryption algorithm of Private Key and Public key. Private key always stay on server and public key is added into the TXT record of DNS . Sender a owner of domain will identify by the receiver easily.
In cPanel web hosting control panel you can easily create Private and Public key under email authentication manage section. Copy the public key and paste it into DNS record in TXT section.
Example Public Key :
Host Name : default._domainkey
“default” is the DKIM selector , any name s1 etc
Value :
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMI3afasdfasdfasdftYIJ/DjSdU/HFqz7cMw/Phoc+iJ6SZYkO6BiqH8xD7wwZi2V6XG+0dWtB8ZtOCacA0mvSSKeq9jwZFkhtQ2323423BPe8/lTSBYSQnNPLttF/i4GOgGuoSqtswo29jVJL1I3aTQP2m9KCIgKm4rKwCBMvntL0UIbwZm+xcX/Xi1PytlFkuhYI8LPCW2Kb8mMzMYfw3YyLhiMXtjdasfasdfasdfewr23r42RoaJsaMeC0bZHwpEId4ZKMaFBdT+zh34a0tPZPd0vHVCjvETWX+GN4zNkJ2Zay6SlE2XzHe6++g8Jk5jQIDAQAB;
Example Private Key :
<!—Start -->
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;
<!-- End -->
DMARC
Domain-based Message Authentication, Reporting and Conformance (DMARC) . Its based of SPF and DKIM , if both success then DMARC process start and success. It ties both two protocol together. If not success into any then what to do and report back of sender server.
You can create and test SPF, DKIM and DMARC on MXTOOLBox or DMARC Tool website.
Example :
v=DMARC1; p=none; rua=mailto:name@domain.com; ruf=mailto:name@domainname.com; fo=1;
v -- This is the version tag, just like with SPF. It MUST be “DMARC1” and be the first tag listed in the DMARC record.
p -- This is the policy tag. It tells the receiving server which policy to apply “none” , “quarantine” e or “reject” the message.
rua=mailto:name@domainname.com -- This tag tells receiving servers where to send aggregate reports.
fo -- This tag lets receiving servers know that samples of messages that fail either SPF and/or DKIM should be returned to the sender. There are four value options for this tag:
- 0: Generate a DMARC failure report if both SPF and DKIM fail to produce a “Pass” result. This is the default option.
- 1: Generate a DMARC failure report if both SPF and DKIM produce something other than a “Pass” result. This is the recommended option.
- d: Generate a DKIM failure report if the message had a DKIM signature that failed the evaluation, regardless of why.
- s: Generate an SPF failure report if the message failed SPF evaluation, regardless of why.
All these above protocols require to make emails spam free on the receiver side. Otherwise, you email will go into spam folder. For better fast , secure and cheapest hosting buy from here
