{"id":2871,"date":"2023-03-28T09:40:01","date_gmt":"2023-03-28T09:40:01","guid":{"rendered":"https:\/\/servgate.jp\/spf-dkim-and-dmarc-why-these-records-matter\/"},"modified":"2023-03-29T06:14:58","modified_gmt":"2023-03-29T06:14:58","slug":"spf-dkim-and-dmarc-why-these-records-matter","status":"publish","type":"post","link":"https:\/\/servgate.jp\/de\/spf-dkim-and-dmarc-why-these-records-matter\/","title":{"rendered":"SPF, DKIM and DMARC – why these records matter"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Fighting spam is a never-ending story for any mailhost and Servgate is no different. And it is a tale of two halves…<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For incoming mail we take measures to identify and then either reject or quarantine spam messages according to severity (score) and the per-domain and per-mailbox configuration that our mail users have set in their\u00a0control panel<\/a>\u00a0or via\u00a0Roundcube<\/a>\u00a0You can read more about that here:<\/p>

When it comes to outgoing mail there are some things we can do to broadly demonstrate that the mail originating from Servgate’s mail-server is legitimate, for example ensuring only our customers can use it to send mail (ie it is not an “open relay”). However, confirming the legitimacy of the sending domain (ie your\u00a0mailbox@domain-name<\/strong>) requires a suite of DNS records with digital signatures and info that “proves” that each message sent from your domain\u00a0 is coming from the right server and that the domain owner is accountable for it at the links.<\/p>

“Receivers who successfully validate a signature can use information about the signer as part of a program to limit spam, spoofing, phishing, or other undesirable behavior” – from\u00a0http:\/\/dkim.org\/info\/dkim-faq.html<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t

Improving deliverability for all<\/h2>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

On 1 April 2019 we made a commitment to add SPF, DKIM and DMARC records for all our clients, without charge, where we also provide the domain and can control and create those DNS records.\u00a0We are rolling this out over the course of the year and hope that this will improve each domain’s reputation,\u00a0the rate of successful delivery and indeed the reputation of the sending mail-server itself.<\/p>

Where we do not manage these records, we strongly encourage our customers to take the following steps:<\/p>

SPF<\/h3>

Add a TXT record<\/p>

Sample record:<\/p>

\"v=spf1 include:spf.servgate.jp ?all\"<\/code><\/pre>
Note that if you also send mail via a third party such as Mailchimp, you need to adapt the SPF record to include their server IP as a legitimate source of mail from your domain name. See the help pages of the respective provider for further information.<\/p>
\u00a0<\/p>
DKIM<\/h3>
Ask us\u00a0 to generate and send you\u00a0a key for your domain and add a DNS TXT record.<\/p>
Sample record:\u00a0<\/p>
mail._domainkey. 3600 TXT \"v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkfTbs7llNbHSvFXPngV9\/qK3OPzDSralzn3XnOg4RCWVpXTJSkj1yP\/IsApBoaLGArlk5BuWguNe8B+a\/ZR3b8X+9Fc5EfnU+NCqfFUBWqy5coMtE3OgUC01obNUOQpdKT1Z8PN6Kn7bserFr8QOPaYtOSpBx0+hc5IHonhlYZQIDAQAB\"<\/code><\/pre>
\u00a0<\/p>
DMARC<\/h3>
Sample record:\u00a0<\/p>
_dmarc.<YOUR-DOMAIN>     text = \"v=DMARC1; p=reject; rua=mailto:dmarc-report@servgate.jp<\/a><\/span>; ruf=mailto:dmarc-report@servgate.jp<\/a><\/span>;fo=1\"<\/code><\/pre>
NB there are various options, but this would be fine.<\/p>
Why it matters<\/h2>
Failure to demonstrate a good reputation has an incremental impact on everyone, as recipient servers (eg Gmail, Yahoo!, etc) are more likely to downgrade the reputation of the mailserver itself, even blocking mail delivery completely.<\/p>
Domain reputation matters!<\/p>
If you are a Servgate customer who provides your own domain name and needs help to create the appropriate records, please\u00a0contact<\/a>\u00a0us and we will try to assist.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"
Fighting spam is a never-ending story for any mailhost and Servgate is no different. And it is a tale of two halves… For incoming mail we take measures to identify and then either reject or quarantine spam messages according to severity (score) and the per-domain and per-mailbox configuration that our mail users have set in […]<\/p>\n","protected":false},"author":2,"featured_media":2965,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rs_blank_template":"","rs_page_bg_color":"","slide_template_v7":"","footnotes":""},"categories":[53],"tags":[],"class_list":["post-2871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-faqs"],"_links":{"self":[{"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/posts\/2871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/comments?post=2871"}],"version-history":[{"count":2,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/posts\/2871\/revisions"}],"predecessor-version":[{"id":2968,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/posts\/2871\/revisions\/2968"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/media\/2965"}],"wp:attachment":[{"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/media?parent=2871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/categories?post=2871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/servgate.jp\/de\/wp-json\/wp\/v2\/tags?post=2871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}