MailRoute requires the use of DKIM, a system designed to detect email spoofing. DKIM verifies that an email sent from a domain is in fact sent by the owner of that specific domain. The idea behind DKIM is to stop forged sender addresses in emails - those emails we think of as phishing or spam.
How it works:
Each email using DKIM contains a digital signature which verifies the signer's public key published in the DNS. This valid digital signature assures that some parts of the email have not been modified since the signature was affixed.
What you need to do:
If you're using MailRoute for outbound, set up the following DNS records for each of your domains so that your email will pass DKIM checks:
|Hostname DNS Entry||Type||Value|
That's it! That's the most basic thing you need to do.
But while you're in there, why not set up DMARC and ADSP as well, and check your SPF records?
You can read our Knowledge Base article that covers DMARC and ADSP, bu here's a brief primer on setting them up:
If all your email is DKIM signed, meaning it all goes through MailRoute, or all your outbound servers and services are signing your email, set this record too:
If all your outbound mail goes through MailRoute, or if your other services support DKIM and you have a proper SPF record, you can implement a simple DMARC record like this:
This is a very basic DMARC configuration. But DMARC has a lot of other features as well. If you want to take advantage of the reporting and management features of DMARC, we recommend that you check out a service like dmarcian.com.
This combination of records gives your domain the best protection against forgeries and spoofing of email that claims to come from your domain and users.
Do you use other services to send email that comes from your domain?
If you're using other services that may send email on your behalf, be sure to check out their own DKIM implementations. Here is a list of some DKIM supporting sites:
- Zendesk supports DKIM signing of outbound mail
- So does Office365
- Google Apps, Google Workspace, G Suite
- Amazon Web Services
- Host Gator
- Mail Chimp
- Constant Contact
Email Authentication - An Explanation and Exploration
Implementing SPF for the MailRoute Outbound/SmartHost Service
Implementing DMARC for the MailRoute Outbound/SmartHost Service
Please sign in to leave a comment.