SMTP RElay with DKIM and DMARC of Office 365

%3CLINGO-SUB%20id%3D%22lingo-sub-716084%22%20slang%3D%22en-US%22%3ESMTP%20RElay%20with%20DKIM%20and%20DMARC%20of%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-716084%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20mail%20sending%20apps%20that%20uses%20SMTP%20relay.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eif%20we%20are%20going%20to%20deploy%20DKIM%20and%20DMARC%20%2C%20how%20can%20we%20include%20the%20mails%20being%20sent%20by%20mail%20sending%20apps%20in%20DKIM%2FDMARC%20protection%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-716084%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-716160%22%20slang%3D%22en-US%22%3ERe%3A%20SMTP%20RElay%20with%20DKIM%20and%20DMARC%20of%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-716160%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F61448%22%20target%3D%22_blank%22%3E%40Marvin%20Oco%3C%2FA%3E%26nbsp%3BThis%20is%20something%20we%20work%20with%20a%20lot%20for%20out%20customers.%20It%E2%80%99s%20quite%20straight%20forward.%20Let%E2%80%99s%20take%20Mailchimp%20as%20an%20example.%20With%20Exchange%20Online%20you%20most%20likely%20have%20create%20an%20SPF%20record%20already.%20Then%20you%20set%20up%20DKIM%20for%20Office%20365.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20DKIM%20you%20create%20a%20CNAME%20record%20for%20k1._domainkey.yoursite.com%20with%20this%20value%3A%20dkim.mcsv.net.%3CBR%20%2F%3EFor%20SPF%20you%20add%20this%20TXT%20value%3A%20include%3Aservers.mcsv.net%3CBR%20%2F%3ESee%20the%20links%20below.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20a%20general%20statement%3A%20The%20best%20idea%20is%20to%20use%20subdomains%20for%20your%20marketing%20needs%2C%20for%20instance%20send%20those%20mails%20from%20marketing.%3CYOURDOMAIN%3E.com.%3C%2FYOURDOMAIN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20come%20back%20with%20questions%2C%20and%20I%E2%80%99ll%20guide%20you%20through%20this%20jungle.%20Personally%2C%20I%20always%20recommend%20%3CA%20href%3D%22https%3A%2F%2Fdmarcian.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdmarcian.com%2F%3C%2FA%3E%20in%20order%20to%20work%20with%20DMARC.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmailchimp.com%2Fhelp%2Fset-up-custom-domain-authentication-dkim-and-spf%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmailchimp.com%2Fhelp%2Fset-up-custom-domain-authentication-dkim-and-spf%2F%3C%2FA%3E%3CBR%20%2F%3EMailChimp%20and%20DMARC%3A%20How%20to%20Make%20it%20Work!%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DbeUEa6Ft3f4%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DbeUEa6Ft3f4%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%2C%20Jon%20Alfred%20Smith%2C%20Senior%20Consultant%20at%20Lillevik%20IT%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Super Contributor

We have mail sending apps that uses SMTP relay.

 

if we are going to deploy DKIM and DMARC , how can we include the mails being sent by mail sending apps in DKIM/DMARC protection?

1 Reply
Highlighted

@Marvin Oco This is something we work with a lot for out customers. It’s quite straight forward. Let’s take Mailchimp as an example. With Exchange Online you most likely have create an SPF record already. Then you set up DKIM for Office 365.

 

For DKIM you create a CNAME record for k1._domainkey.yoursite.com with this value: dkim.mcsv.net.
For SPF you add this TXT value: include:servers.mcsv.net
See the links below.

 

As a general statement: The best idea is to use subdomains for your marketing needs, for instance send those mails from marketing.<yourdomain>.com.

 

Please come back with questions, and I’ll guide you through this jungle. Personally, I always recommend https://dmarcian.com/ in order to work with DMARC.

 

https://mailchimp.com/help/set-up-custom-domain-authentication-dkim-and-spf/
MailChimp and DMARC: How to Make it Work!
https://www.youtube.com/watch?v=beUEa6Ft3f4

 

Best regards, Jon Alfred Smith, Senior Consultant at Lillevik IT

This video will show users how to setup authentication for MailChimp. The end results are using the organization's domain name as opposed to "sent via", and ...