Email records

SPF and DMARC records tell receivers which servers may send mail as your domain.

What it is

SPF lists the senders you allow. DMARC says what receivers do with mail that fails the check and where reports go.

Why it matters

Without them, anyone can send mail that claims to come from your domain, and receivers accept it. A broken include or more than 10 lookups makes receivers ignore the SPF record. A DMARC policy of none only watches. Phishing that uses your name reaches your customers and costs you their trust.

How Tenty checks it

Tenty reads the TXT, MX and _dmarc records of your registered domain. It checks them when the domain receives mail.

How to fix it

1. Publish an SPF record that lists your senders and ends with -all or ~all, for example v=spf1 include:_spf.google.com ~all. 2. Remove includes that publish no record and keep the lookups under 10. 3. Publish a DMARC record at _dmarc.YOUR-DOMAIN, starting with v=DMARC1; p=none; rua=mailto:you@YOUR-DOMAIN. 4. After a few weeks of reports, move to p=quarantine and then p=reject.

How to reproduce

dig +short TXT YOUR-DOMAIN
dig +short TXT _dmarc.YOUR-DOMAIN

The first answer holds the SPF record. The second holds the DMARC record.