Configuration of SPF, DKIM and DMARC

SPF records are used to tell other mail servers, which mail server your domain sends emails through. If they receive emails from a server that is not specified on the SPF list, then they will usually consider the email of being spam. In contrary, if the server is specified on the list of servers, then the mail is probably NOT spam.
A correct SPF record can help you avoid that your emails end up being blocked in the receivers spam filter.

To do this you should simply add a TXT record on your domain with the following content:
v=spf1 -all

"" is a record we maintain so you don't have to do it.

You can configure this record manually or with our DNS-configuration tool which you can find in our DNS Administration page through our Dashboard.

This record is made with the expectation that you only send emails for your domain through and other servers through In case you send through other mail servers (for example your internet provider), then you must expand your SPF record with these. Official documentation on the SPF syntax can get found here:

Make sure that your SPF record is 100% correct.


DKIM is a signing of outgoing emails. This means that when you send emails through your system or your mail program it has to be signed with a key, where the corresponding key is specified in a DNS record on the domain. As a result, the receiver will know that the person that has sent the mail is the same as the domain owner. DKIM-sign all emails that have been sent through, (port 587) as well as our webmail. In order to make the signing valid, the following CNAME record must be in place in your domain's DNS zone. The record will automatically be included " DKIM & SPF" DNS-configuration" and looks like the following:

unoeuro._domainkey CNAME

You must DKIM-sign outgoing emails that aren't sent through above-mentioned systems and configure the necessary DNS-records yourself.


DMARC is a DNS record that is used to configure a policy as to how a receiving server should react on incoming mails for a domain, and whether it should reject emails that aren't DKIM and SPF validated or not. You must configure and construct the DMARC DNS-record on your domain. You can with advantage use to help with the configuration and monitoring of DMARC.

Article from the support category: Mail