I’ve been working on optimizing the outgoing mail from my virtual server. This server has several virtual domains which send and receive mail as well. I’ve been using the mail-tester.com service to check configurations, and I seem to be able to get 9 or 10 out of 10 on all my sites. However, there’s a warning that comes up about the DMARC record. The mail-tester advice is:
You do not have a DMARC record A DMARC policy allows a sender to indicate that their emails are protected by SPF and/or DKIM, and give instruction if neither of those authentication methods passes. Please be sure you have a DKIM and SPF set before using DMARC. You do not have a DMARC record, please add the following one to your domain _dmarc.lists.example.net
and my bind entry is:
_dmarc.lists.example.net. IN TXT “v=DMARC1;p=none”
Finally, a dmarcian.com inspection does show a record matching what I put in bind. Does this look correct, or is there some nuance that I’m missing and mail-tester.com isn’t explaining in a way that I see? Thanks!
Edit: To remove the obvious noob mistake question…no my bind entry does not actually say example.net, it’s the actual name of the server used in the Errors-To, Sender, and Return-Path headers in the emails.
Powered by WPeMatico