In today's digital world, email remains a crucial communication tool. But with the rise of spam and phishing attacks,
ensuring your emails reach their intended recipients is more important than ever. This is where SPF, DKIM, and DMARC come
in. These three essential DNS records work together to authenticate your emails, boosting deliverability and protecting your
reputation.
Why are these records important?
- Increased Deliverability: When your emails are properly authenticated, email providers like Gmail and Outlook are
more likely to deliver them to the inbox instead of the spam folder. This ensures your important messages reach your
audience.
- Reduced Spam and Phishing: By verifying the sender's identity, these records make it harder for spammers and
phishers to impersonate your domain, protecting your customers from malicious attacks.
- Improved Brand Reputation: Authenticated emails build trust with your recipients, as they know the emails are
genuinely from you. This strengthens your brand image and fosters better communication.
Understanding the Records:
1. SPF (Sender Policy Framework):
This record specifies which servers are authorized to send emails on your behalf. This helps prevent unauthorized emails
from being sent from your domain.
2. DKIM (DomainKeys Identified Mail):
This record adds a digital signature to your emails, verifying their authenticity and preventing tampering during transit.
3. DMARC (Domain-based Message Authentication, Reporting & Conformance):
This record tells email providers what to do with emails that fail SPF or DKIM checks. It also provides reporting so you
can monitor email authentication and identify potential issues.
The Records You Need:
The records provided below should be tailored to your domain and Nexus service setup. Here's a breakdown:
DMARC:
- Name: `_dmarc.DOMAIN.com.au`
- Type: TXT
- Value: `v=DMARC1; p=reject`
This record tells email providers to reject emails that fail SPF or DKIM checks, offering the highest level of
protection.
SPF:
- Name: (Leave blank)
- Type: TXT
- Value: `v=spf1 a mx include:smtp3.nexusdigital.net.au -all`
This record authorizes Nexus servers and your domain's mail servers to send emails.
DKIM:
- Name: `nm3._domainkey.DOMAIN.com.au`
- Type: CNAME
- Value: `nm3._domainkey.nsmcloud.com.au`
This record links your domain to Nexus's DKIM signing service, adding the digital signature to your emails.
Don't wait, implement now!
Adding these records is a simple and crucial step to ensure your email communication is secure and effective. By working
with Nexus support, you can easily implement these records and enjoy the benefits of improved deliverability, enhanced
security, and a stronger brand reputation.
Updated: 20 February 2024