Page History

...

• Check your SPF record. Several Web sites exist:
  • https://mxtoolbox.com/spf.aspx
  • https://www.dmarcanalyzer.com/fr/spf-4/checker/
  • https://www.kitterman.com/spf/validate.html
  • http://spf.myisp.ch/

Setup DKIM

Introduction to DKIM

...

• The mosamuseum institution add the two following DNS records in their zone (to enable updates of keys)
  

  stxsel1._domainkey.mosamuseum.com.  IN CNAME sel1-mosa._domainkey.dkim.secutix.com.

  stxsel2._domainkey.mosamuseum.com.  IN CNAME sel2-mosa._domainkey.dkim.secutix.com.

  !!! Be careful to change:

  domain name "mosamuseum.com" with the domain name which is defined in Sales Channels (Parameters => Sender email)

  institution code "mosa" with the institution code

• The customer opens a service support request in order to enable signature of outgoing emails
• SECUTIX generates a pair of DKIM public/private key for two given selectors

• SECUTIX signs all emails sent with the DKIM private key. This signature is included in the header of the email.

Setup MX

See https://abnormalsecurity.com/glossary/mx-record, which includes "if you want to successfully deliver emails, you need an MX record".

Setup DMARC

Introduction to DMARC

DMARC, which stands for “Domain-based Message Authentication, Reporting & Conformance”, is an email authentication, policy, and reporting protocol. It builds on the widely deployed SPF and DKIM protocols, adding linkage to the author (“From:”) domain name, published policies for recipient handling of authentication failures, and reporting from receivers to senders, to improve and monitor protection of the domain from fraudulent email. Source: https://dmarc.org/.

DMARC - Procedure to follow

Due to recent changes to email handling by Google and Yahoo for anyone sending more than 5,000 emails daily, you should ensure that you have a DMARC record in your DNS settings.

If you don't know anything about DMARC, then we recommend you add the following DNS record:

• _dmarc.mosamuseum.com.  IN TXT "v=DMARC1; p=none"

Please check afterwards with https://mxtoolbox.com/dmarc.aspx: it shouldn't include any errors (i.e. anything flagged with Image Added). Please also read https://support.google.com/a/answer/10032473 to progressively improve your DMARC record.