SPF and DMARC Records for Email Hosting

To enhance email security and prevent spoofing, WebVault customers should configure SPF and DMARC records correctly. These records help ensure that only authorized mail servers can send emails on behalf of your domain.

SPF Record Configuration

SPF (Sender Policy Framework) is used to specify which mail servers are permitted to send emails for your domain.

SPF Record Details:

• Type: TXT

• Hostname:customerdomain.com.au

• Value:v=spf1 include:mailsolutions.com.au -all

Important Considerations:

• This SPF record allows only WebVault’s mail servers to send emails from your domain.

• Emails forwarded by remote servers may not be successfully delivered due to SPF limitations.

DMARC Record Configuration

DMARC (Domain-based Message Authentication, Reporting, and Conformance) provides additional protection against email spoofing by ensuring that emails meet authentication standards.

Strict DMARC Policy

This option enforces strong email authentication but may prevent some auto-responders and forwarded emails from being delivered.

Strict DMARC Record Details:

• Type: TXT

• Hostname: _dmarc.customerdomain.com.au

• Value: v=DMARC1;p=reject;aspf=s

Key Considerations:

• Emails must have DMARC alignment.

• The Return-Path address must match the From Address header.

• Emails from sources that do not align properly will be rejected.

Relaxed DMARC Policy

A relaxed policy provides greater email delivery compatibility while still preventing email spoofing.

Relaxed DMARC Record Details:

• Type: TXT

• Hostname: _dmarc.customerdomain.com.au

• Value: v=DMARC1;p=reject;aspf=r

Key Considerations:

• This allows for a looser alignment between the Return-Path and From Address headers.

• More flexible but slightly reduces security compared to the strict policy.

Final Steps

1. Log into the WebVault Toolbox OR your alternative DNS hosting provider.

2. Navigate to the DNS management section.

3. Add the SPF and DMARC TXT records as specified above.

4. Save changes and allow time for DNS propagation (usually a few hours to 24 hours).

By correctly configuring SPF and DMARC records, WebVault customers can significantly reduce the risk of email spoofing and enhance email deliverability.