Email DNS Master Course | SPF + DKIM + DMARC Explained

Read the full blog post

In this tutorial, were going to cover SPF, DKIM and DMARC records. If you own a domain, it’s very important that you have those records setup to prevent email spoofing, and fraud.

If you don’t have these records set, then you basically allow anyone to send emails impersonating your domain identity. This could get your domain listed. Its important for every domain you purchase, you set your SPF D KIM and DMARC records even if you’re not planning on sending any emails.

Finally, I will show you how you can obtain both your free Aggregate and Forensic Reports so you could monitor emails sent from your domain. These reports can give you insights and records of emails that were sent out on your behalf.

Follow us

Chapters
0:00 Introduction
1:11 Email Spoofing
2:47 SPF Record
3:42 SPF Record - Syntax
5:06 SPF Record - Qualifiers
6:51 SPF Record - Mechanisms
8:40 SPF Record - Validation
9:32 DKIM
11:22 What is DKIM?
12:44 What is DMARC Aggregate Report?
13:23 What is DMARC Forensic Report?
14:07 How to create DMARC Records?
14:23 DMARC Record - Syntax
20:06 DMARC - Validation

[scottfraser]

Excellent! Your explanation demystified this setup that's been illuding me for a week. By pausing your video as I went, I was able to setup the DMARC record and validate it. The first validation failed due to syntax error, which was a missing semicolon at the end.

One additional suggestion I'd make is to check the "raw" DMARC code in the record created. The optional tags I didn't specify were set to "relaxed" rather than "strict" which didn't appear until I checked the raw coding. The "raw" coding included the default settings I didn't specify, which is where the issues were found.

[tanyaramirez]

You are so awesome! You teach this at a wonderful pace and I love love love how you break it down! I have subscribed to your channel and I appreciate your work!!!!

[Zolodar]

Awesome video with great explanations! Thanks so much!

I just noticed a few minor mistakes that some people might find relevant:
- at 12:42 it says "RUA" for both reports, but it should be "RUA" for the aggregate report and "RUF" for the forensic report
- at 18:43 about aspf the slide on screen says "relaxed" is the default (which I also found on other sources) but in your voice-over you say that the default is strict

[hereistyagi]

Brother can't thank you enough in words 🙏💕💕💕. You are a lifesaver. Instantly subscribed

[hajarsalman]

Clear explanation for all the terms, please make a video for the DKIM

[kevinshaddy]

You are awesome! Explained to the "T" and granular to the last detail.

[_spacex]

This is a really excellent explanation with details of TXT record, thank you!

[ТімурУразбахтін]

nice and useful! please make a video about DKIM!

[hudsville]

GREAT tutorial. Complete novice here. You explain it perfectly and clearly. THANK YOU

[senditall]

Now I understand this better.
Thank you for the great lesson!

[salmaassar]

Highly informative video. My concept of mailing is clear now. Thank you so much ❤️.

Please make video about DKIM. Thank you.

[flywithparis]

Google domain changed to square but this video was still very much helpful ❤❤❤❤❤❤

[sahays]

Thank you for the crystal clear explanation video.

[nottynatsa]

Yes, please make a video on dkim when hosting your own mail server

[martinephilippe]

Hi,
It is not clear why/how someone could by-pass a domain SPF protection and dmark will fix that?
Because dmark is more to get reports and notificaitons when someone tried to send on your domain name?

[ReservationsASPENROGERS]

GREAT EXPLANATION AND FINALLY AFTER WATCHING YOUR VIDEO GOT IT TO WORK. I HAVE BEEN AT IT FOR LAST 3 days.

[virtualtransientvagrant]

When I add these for my Google Domain, it knocks my site offline. I can see using a tool that the spf, skim, dmarc are all setup correctly - but the nameserver settings for my website aren't working. However when I prioritize my name servers, then my workspace email settings don't work properly. Any ideas on what I could be doing wrong.
A bit more info - my registrar is Google domains and my web host is through wix, using their name servers. Previously, I was using custom name servers (in google dns settings) but to setup my workspace properly (also through google) I used default name servers. Using default, I don't see an option (or don't properly understand) how to setup the name servers there. When I try I get an error, "cannot change ns records on the root domain with google domains name servers.".
Any pointers?

[euntk]

Big thanks for this very informative video.

[koetje]

Does anyone know why companies hardly set these records up and when being confronted with it companies seem to not care. Even IT professionals seem to not care about their protection.

[georgesullivan]

This is now 2 years old. Any updates on SPF, DKIM, or DMARC