DNS records

Checked 3 min ago

DKIM

publishedNot a secret · selector sp2026

Host / name

Type

Value to publish

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3kqV0mJd8e2f1Yb7Qw5uT9sLr4nHc6pZaXo1vKe0yWm2gBt8RjN5dCq3hUf7lPs9aEi4oMz6xTb1kGv0nYw…IDAQAB

SPF

mismatchMerge into the existing record — never publish a second one

Host / name

Type

Value to publish

In DNS now

The published record does not authorize 203.0.113.25. Add ip4:203.0.113.25 before ~all. Shallow check: include: is not followed.

DMARC

publishedReport address: example.org@dmarc.mail.example.org

Host / name

Type

Value to publish

p=none does not affect delivery. Tighten to quarantine, then reject, once the reports look clean.

02

Applications

SASL logins that may send as this domain

Login	May send as	30 days	Limits
prod-server	*@example.org	1 102 msg · peak 96/h	200 / h	Edit
alerts	alerts@example.org, noc@example.org	182 msg · peak 14/h	domain 2 IPs	Edit

New password and Delete ask for confirmation; the old password stops working at once.

03

Connection

The same for every domain

Server: mail.example.org
Port 465: SSL/TLS (implicit)
Port 587: STARTTLS (submission)
Authentication: Application login, required on every port