Link to home
Start Free TrialLog in
Avatar of Correctamundo
Correctamundo

asked on

Where to set up SPF and DMARC on your own emails in Exchange 365 ?

set up SPF and DMARC for your email domain it will mark spoofed email as spam and flag for your users that the email is not legitimate.

Where to set up SPF and DMARC on your own emails in Exchange 365 ?
Avatar of David Favor
David Favor
Flag of United States of America image

You have a few setup items...

1) DNS SPF record.

2) DNS DKIM record.

3) DKIM signing infrastructure, where you route every message through some DKIM local daemon which returns the correct headers to inject into messages leaving your MTA.
Avatar of Correctamundo
Correctamundo

ASKER

Can I just ask my exchange 365 provider who also host my www to double check these for me?
They are usually very helpful
Can I just ask my exchange 365 provider who also host my www to double check these for me?

Not just check with them.

You need to work with the tech who maintain the nameserver of the DNS record of your domain to create DKIM signature and DMARC records.

SPF record should be created at the time you migrate to Exchange 365.
Can I just ask my exchange 365 provider who also host my www to double check these for me?

Exchange != HTTPS

So asking any question about www (HTTPS) has no meaning in an Exchange (SMTP/IMAP/POP) context.

Email != Web

There's no correlation of SPF/DKIM to any HTTPS level changes.
ASKER CERTIFIED SOLUTION
Avatar of J0rtIT
J0rtIT
Flag of Venezuela, Bolivarian Republic of image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The two records SPF and DMARC are Text Records added to your DNS.  

Example if your domain name was registered with Go-Daddy, you would:
  1. Create the two text records via the tools below,
  2. Contact Go-Daddy Support,
  3. Ask them to add these to the DNS for your domain name on their system.

To decide how to compose your records:
MXToolbox SPF creator tool = https://mxtoolbox.com/SPFRecordGenerator.aspx

DMARC records Generator = https://dmarcguide.globalcyberalliance.org/#/

These will walk you through creating the records.  Once you have both you could contact your Domain Name Registrant and ask them to add them.

Things to keep in mind
  • Start with lower level settings until you have time to understand what each record does.
  • You can come back and increase the settings later if needed.