Skip to content

Phils Blog and Stuff

TELECOMS. VIRTUALIZATION. IT. CODING. and more…

Menu
  • Home
  • Resources
    • Subnet Mask Cheat Sheet
    • Easy Dmarc+Email
    • MX Tool Box
    • LOAD BALANCING & SRE
  • SHOP
  • SOLUTIONS
  • SERVICES
  • Contact Me
Menu

Setting up SPF DMARC BIMI DKIM for email

Posted on 08/03/202313/03/2023 by Phil

SPF

domain.com. IN TXT "v=spf1 a mx ~all"

DMARC

_dmarc.domain.com. IN TXT "v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:dmarc@domain.com;ruf=mailto:dmarc@domain.com;ri=86400;aspf=r;adkim=r;fo=1"

BIMI

default._bimi.domain.com. IN TXT "v=BIMI1;l=https://domain.com/bmi.svg;a="

DKIM

Go to https://easydmarc.com/tools/dkim-record-generator?domain=domain.com
Choose selector “s1”
Set Key lengh
Click generate

Put Public key in DNS

Put Private key in Email Server DomainKey (DKIM) Settings as PEM

s1._domainkey.domain.com. IN TXT "v=DKIM1; k=rsa; t=s; p=[PUBLIC_KEY_HERE]"

MTA-STS

Unix Epoch Converter/generator – https://www.epochconverter.com/

_mta-sts.domain.com. IN TXT "v=STSv1; id=167776672837Z;"
mta-sts.domain.com. IN A 1.1.1.1

PLUS Place the below in ../.well-known/mta-sts.txt

version: STSv1
mode: testing
mx: mail.domain.com
max_age: 604800

TLS-RPT

_smtp._tls.domain.com. IN TXT "v=TLSRPTv1; rua=mailto:TLS-RPT@domain.com;"

POSTS

  • Home Assistant. Add water meter with PHP+MQTT+YML.
  • Automating your home with Home Assistant. Initial install and config (Hyper-V).
  • The importance of setting up email security correctly.
  • Automate Debian installations with Seed, DHCP and Nginx.
  • A simple link shortener.. Fun little project…

WORD CLOUD

3CX 3CX Phone System Apache Asterisk Cacti CentOS CRM DHCP DNS Email Fail over Failover File System Firewall FreeBSD FreeNAS FXO IAX install IP IP PBX Linux M0n0wall Nottingham Open Source PBX PFSense PHP Router Server SIP snom SSH TrixBox ubuntu VLAN Voice VoIP VPN vyatta WAN Website WiFi yealink ZFS

© 2025 Phils Blog and Stuff | Powered by Superbs Personal Blog theme