How to authenticate outbound email with SPF, DKIM, and DMARC records in EXO?

Question

How to authenticate outbound email with SPF, DKIM, and DMARC records in EXO?

Vinod Survase 4,811

Aholic Liang-MSFT 13,926 Reputation points Microsoft External Staff

2023-09-29T02:19:54.7233333+00:00

Hi @ Vinod Survase ,

Just checking in to see how things are going on with this thread.

If the reply was helpful, you can click the "Accept Answer" button under this post so that other's with similar question can benefit from this thread as well.

If you still have further questions or concerns, feel free to post back.
Aholic Liang-MSFT 13,926 Reputation points Microsoft External Staff

2023-10-04T09:50:59.5833333+00:00

Hi @ Vinod Survase ,

If you find the reply above helpful, do you mind accepting it as answer to help increase visibility of this question for other members of the Microsoft Q&A community? If you still have further concerns about this thread, feel free to post back.

1 answer

Your answer

Aholic Liang-MSFT 13,926 Reputation points Microsoft External Staff

2023-09-29T02:19:54.7233333+00:00

Hi @ Vinod Survase ,

Just checking in to see how things are going on with this thread.

If the reply was helpful, you can click the "Accept Answer" button under this post so that other's with similar question can benefit from this thread as well.

If you still have further questions or concerns, feel free to post back.
Aholic Liang-MSFT 13,926 Reputation points Microsoft External Staff

2023-10-04T09:50:59.5833333+00:00

Hi @ Vinod Survase ,

If you find the reply above helpful, do you mind accepting it as answer to help increase visibility of this question for other members of the Microsoft Q&A community? If you still have further concerns about this thread, feel free to post back.

Answer 1

Hi @ Vinod Survase ,

For outbound emails, DKIM signatures are mainly required.

The process of enabling DKIM signing in EXO involves creating two DNS CNAME records that point to Microsoft 365 or Office 365.

These records allow EXO to sign outgoing e-mail messages with a digital signature that can be verified by the receiving mail server. This signature helps ensure that the e-mail message has not been tampered with in transit.

You can refer to this link to create a DKIM record for your domain：How to use DKIM for email in your custom domain | Microsoft Learn

In addition, I recommend that you configure all three records for your domain, and the remaining two records function as follows:

SPF: This record helps prevent spoofing and phishing by verifying the origin of the email. To create an SPF record for EXO, you need to include the following values in your DNS TXT record：

v=spf1 include:spf.protection.outlook.com -all.

This value tells the receiving mail server to accept email from your domain only if it comes from Microsoft 365 or the IP address specified by Office 365. If an email fails the SPF check, it is rejected with a hard fail (-all).

DMARC: This record specifies how incoming mail servers should handle email from your domain that doesn't pass SPF or DKIM checks. This record helps you control the delivery and reporting of unauthenticated email messages.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Vinod Survase 4,811 Reputation points

2023-09-26T08:32:35.63+00:00

Aholic Liang-MSFT Thanks for reply on this
Aholic Liang-MSFT 13,926 Reputation points Microsoft External Staff

2023-09-26T09:02:22.84+00:00

Hi @ Vinod Survase ,

If the reply was helpful, you can click the "Accept Answer" button under this post so that other's with similar question can benefit from this thread as well.

Share via

How to authenticate outbound email with SPF, DKIM, and DMARC records in EXO?

1 answer

Your answer