Setting up SPF DMARC BIMI DKIM for email

Posted on by Phil

SPF

domain.com. IN TXT "v=spf1 a mx ~all"

DMARC

_dmarc.domain.com. IN TXT "v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:dmarc@domain.com;ruf=mailto:dmarc@domain.com;ri=86400;aspf=r;adkim=r;fo=1"

BIMI

default._bimi.domain.com. IN TXT "v=BIMI1;l=https://domain.com/bmi.svg;a="

DKIM

Go to https://easydmarc.com/tools/dkim-record-generator?domain=domain.com
Choose selector “s1”
Set Key lengh
Click generate

Put Public key in DNS

Put Private key in Email Server DomainKey (DKIM) Settings as PEM

s1._domainkey.domain.com. IN TXT "v=DKIM1; k=rsa; t=s; p=[PUBLIC_KEY_HERE]"

MTA-STS

Unix Epoch Converter/generator – https://www.epochconverter.com/

_mta-sts.domain.com. IN TXT "v=STSv1; id=167776672837Z;"
mta-sts.domain.com. IN A 1.1.1.1

PLUS Place the below in ../.well-known/mta-sts.txt

version: STSv1
mode: testing
mx: mail.domain.com
max_age: 604800

TLS-RPT

_smtp._tls.domain.com. IN TXT "v=TLSRPTv1; rua=mailto:TLS-RPT@domain.com;"