Fighting E-mail Forgery (SPF / DKIM Overview)
Panel path: DNS Functions → DNS Zone Editor + mail
SPF and DKIM prove your domain authorized the sending server. Without them, Gmail and Microsoft often bounce (550) or junk your mail. Full how-tos are under DNS → SPF Setup and DKIM Setup.
Why SPF and DKIM matter
SPF lists which servers may send for your domain. DKIM cryptographically signs messages. DMARC tells receivers what to do when checks fail.

What to publish
- Confirm MX points to this hosting mail stack (or your intended provider).
- Follow DNS → SPF Setup to publish one SPF TXT for the apex domain.
- Follow DNS → DKIM Setup to publish the selector TXT (often default._domainkey).
- Optionally add DMARC at _dmarc.yourdomain.com starting with p=none.
- Send a test to an external mailbox and review Authentication-Results headers or a mail-tester style report.
Notes
- Only one SPF TXT should exist for the domain.
- If nameservers are not on this server, add the same TXT records at your DNS provider.