Configuring the Host/Name field for SPF, DKIM, and DMARC records can vary slightly across different DNS providers. However, the underlying purpose and principles remain consistent. In this article, we’ll explore common cases to make the process easier.
For DMARC Record:
In the DNS zone for a DMARC record, the Name/Host section should follow specific conventions.
- _dmarc: This is the standard value used for DMARC records. This specifies that the record is for DMARC. This is the recommended and widely accepted approach.
For example, in CloudFlare it looks like the following:
If your DNS provider doesn't automatically append the domain name, you need to include it manually, such as: _dmarc.yourdomain.com.
For SPF Record:
In the DNS zone, for the SPF record in the Name/Host section, the following are common options you can use:
- @ : Represents the root domain (e.g., example.com). Use this if the SPF record is for the domain itself.
- Empty (blank): Some DNS providers interpret a blank Name/Host as the root domain, similar to @.
- Your domain (example.com): instead of @ or leaving it blank you can write your domain name because some DNS provider requires explicit naming rather than using @ or a blank value.
- Specific subdomain: specify a subdomain (e.g., mail, subdomain.example.com) if the SPF record applies only to that subdomain.
- * : Wildcard for all subdomains, though it’s rarely used for SPF as it can lead to broader implications.
The choice depends on where you want the SPF to apply. For most cases, @ and leaving it empty or specifying your domain name is suitable for the primary domain. For example, in CloudFlare it looks like the following:
For DKIM Record:
In the DNS zone for a DKIM record, the Name/Host section typically includes the selector and “_domainkey.” Here are the possible options you can use:
- Selector._domainkey(most common): This is the standard format for DKIM records. Here, the selector is a unique identifier that allows multiple DKIM keys for the same domain.
- selector._domainkey.yourdomain.com: In some DNS providers, you might need to provide the complete domain name explicitly, especially if they don't automatically append the domain to the record.
This achieves the same result as the first option but is manually specified.
For example:
If you encounter any difficulties, please don’t hesitate to contact our support team by submitting a ticket.