10 min read

How to setup MX, SPF, DKIM, DMARC

Configure MX, SPF, DKIM, DMARC, forwarding, and verification for domains used with Outlio.

This is the core authentication checklist every sending domain should pass before campaign launch.

Edit DNS where nameservers point

Your registrar is not always your active DNS host. If nameservers point to Cloudflare, edit Cloudflare. If they point to Namecheap or GoDaddy, edit there. Editing the wrong place is the most common reason records never show up.

1

What each record does

  • MX receives email for the domain, including campaign replies.
  • SPF lists which providers are allowed to send mail for the domain.
  • DKIM signs outgoing email so receivers can verify it was not changed in transit.
  • DMARC tells receivers how to evaluate SPF and DKIM failures.
  • A custom tracking CNAME keeps tracked links aligned with your own sending domain.
2

SPF setup rules

SPF is a TXT record at the root host, usually @. You should only have one SPF record for a domain. If you use more than one legitimate sender, merge the include mechanisms into one record.

  • Google Workspace commonly uses include:_spf.google.com.
  • Microsoft 365 commonly uses include:spf.protection.outlook.com.
  • Your DNS host may use @, blank, or the domain name for the root host.
3

DKIM setup rules

DKIM values are generated by the mailbox provider, not by Outlio. Google often gives a TXT record. Microsoft often gives two CNAME selector records. Use the record type and host exactly as the provider gives them.

4

DMARC setup rules

Add DMARC as a TXT record at _dmarc. Start with monitoring while you confirm legitimate mail passes SPF and DKIM. Tighten the policy only after you know normal business mail is aligned.

Host/name: _dmarc

Example starting value: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Replace the report email with an inbox you control or a DMARC reporting provider.

5

Verify in Outlio

Open Email Accounts.

Click Test Domain Setup.

Review which domains and records are missing.

Fix DNS at the active DNS host.

Wait for propagation and test again.

Done well, this should leave you with

A cleaner Outlio setup, fewer avoidable campaign issues, and a more reliable path from setup to replies.

Related articles

Was this article helpful?

Need more help? Contact Support