Page tree
Skip to end of metadata
Go to start of metadata

SPF configuration

Sender Policy Framework (SPF) technology allows to verify that sender domain has not been faked. To make it work you need to add a special TXT record to your sending domain. It will allow only specified hosts to send messages using your domain.  

We recommend to add records for different SPF versions:


Record type

Contents -all -all

The domain here contains the list of IP addresses Altcraft Cloud MTA uses.

If you have already used your domain for email, add to the existing SPF records "".

Note that we recommend to use restricting rules where only the enlisted resources are allowed!

DKIM configuration

DomainKeys Identified Mail (DKIM) technology adds to your message a digital signature of your from-domain. The signature is automatically verified on the recipient side and hen it is used to manage sender reputation. The signature is technically an RSA key pair: the private part is built in sender infrastructure and the public part should be added to your domain as a special subdomain TXT record:


Record type

Contents; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCldFYh3Rfrmeov+WqYYpwfW2bVUzxXPy9dSVoUCGLKCn+vgY/pdKIIBFitkvZJXGLnHqreqwGzoriEWf9ZRd+cL2LdA4UrDKheMeorBd2NSIqihkTaKz8PA+SIBFxFGm2Z0Krh5ZDF2NtFVhtD4YvqmrFqk2muzZ0tFEko8zP30wIDAQAB;

To get a personal DKIM for Altcraft Marketing contact and provide us with your domain name.

DMARC settings

DMARC technology allows mailing servers to decide what to do if SPF or DKIM verification fails. 

Here we recommend to restrict messages sent from unknown IP addresses or signed incorrectly.


Record type

Contents; p=reject; sp=reject;

BIMI settings

BIMI technology (Brand Indicators for Message Identification) is used along with SPF, DKIM and DMARC or identifying email sender by company brand logo, placed near the message subject in recipient's inbox. Email providers thus can additionally verify the sender. 

To start using BIMI you will need an svg image, that is rectangular and has no extra layers.

BIMI authentication is supported by email services such as Fastmail, Gmail, and Yahoo!

Add the following record to your domain settings, specifying the svg file path:


Record type


default._bimi.example.comTXTv=BIMI1; l=

You can also use BIMI record generator at

Tracking domain settings

Tracking domains are used to collect your customers' behavior information. For any subdomain you use add this record:

DomainRecord typeContents

You can use this record for all of your tracking domains.

  • No labels