How do I set up SPF and DKim?

[user823]

What is the name of the domain?

Softwired AI Software for Digital Marketing, Sales, and Ads

What is the error number?

Not sure

What is the issue you’re encountering

Was informed our SPF is not set up correctly

[DarkDeviL]

@user823

Was informed our SPF is not set up correctly

By whom, or what exactly?

What exactly did the person (or organisation) say, while they were informing you about this?

[user823]

I got an email saying mine was quarantined due to misconfiguration of our SPF. I also did some DNS updates due to some old records and may have accidentally removed the correct one.

I’m just trying to make sure all the records are set up properly.

Thanks!

[DarkDeviL]

@user823

I also did some DNS updates due to some old records and may have accidentally removed the correct one.

The “Audit Log” may be able to provide such information, depending on the age of the changes.

→ https://dash.cloudflare.com/?to=/:account/audit-log

If that doesn’t help, then you will need to contact your hosting provider, so that they can supply you with the relevant DNS record(s) again.

@user823

I’m just trying to make sure all the records are set up properly.

Based on your MX records, it seems like you’re using a paid Google Workspace set up?

Assuming you’re only using Google Workspace, something like this would work for “SPF”:

@DarkDeviL

Google will for example request you to have “include:_spf.google.com” in your SPF record, so if it is Google you use, to send your outbound messages, you would add a TXT record, with information like this:

Type: TXT
Name: @
Content: v=spf1 include:_spf.google.com –all
TTL: Preferably set it to something like 12-24 hours, as mail related records likely do not change that often.

→ https://dash.cloudflare.com/?to=/:account/:zone/dns/records

Note: The actual include: (or whatever) to use in the Content block, instead of e.g. “include:_spf.google.com”, should, as mentioned in the beginning, be substituted with the information you receive from the email provider you use for your outbound messages.

DKIM (e.g. “_domainkey” TXT records) are a little bit different, and there isn’t really any “one-size-fits-all” for them.

If you’re unable to find the content for them in the “Audit Log”, then you will need to request the information from your provider again.