DMARC and SPF policy (own domain)

Runbox Chat
#1

What is a good advice to use for DMARC and SPF policy for own domain, and does runbox respect these policies for own hosted domains?

e.g. is this ok - or is it to strict, that e-mails will not get through?

SPF
v=spf1 include:spf.runbox.com -all

DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc@mydomain.com; pct=100;
#2

I would suggest initially changing the SPF to a soft fail (~all) and change the DMARC to “p=none;” and see how deliverability is.

1 Like
#3

Thanks for the comment. I already have DMARC p=none; now.
For the SPF , actually Runbox recommend -all on their add webmail domain page. I have ?all now, but just wondered if it should be more strict.

#4

Having ?all really defeats the purpose of having an SPF record at all. As I said, see how deliverability is, then perhaps tweak it from there.

#5

Yes I could - how do we now how deliverable it is :slight_smile: aka, how do I know what e-mails are sent to me. Yes I could test with some my self, but what about all the other vendors. Anyway…

#6

You could try mail-tester - it gives excellent feedback on your deliverability. Make sure that you keep their web page open when conducting the test. It’s also better - in the test email - to include some content in the body of the email, a paragraph of some good (not spammy) content. This is of course to test for deliverability - what people send to you depends on their setup.

#7

Thanks. I’ve also used https://www.learndmarc.com/

1 Like
#8

When you start to receive aggregate reports I’ve found that the Dmarcian tool is very useful for interpreting the reports.You don’t need to sign up, just drag and drop the report file to get the result.

1 Like