SPF(supported) (dedicated subdomain)
DKIM(recommended)
This article covers the SPF and DKIM authentication processes for L-Soft EASE and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.
L-Soft EASE uses a TXT DKIM key and a dedicated subdomain configuration setup.
Configuring DKIM authentication for your L-Soft EASE emails
To set up DKIM for your L-Soft EASE emails, you will need to create and publish a DKIM TXT key in your DNS and also add it on your domain's Configuration page in Valimail Enforce, you manage the DKIM in Valimail for that subdomain.
Creating a DKIM TXT record can be done in various ways. If you run your own DNS, simply edit your forward zone file to include a TXT record. We will assume for this exercise that the LISTSERV host name is “listserv.example.com”, and we will enter the following information:
Host: default._domainkey.listserv
TXT Value: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcARWuStG7G33L+M5jqjiCbhfKBlgxIMC8Of5ODONOTUSETHISKEYITISANEXAMPLEONLY91O1RigBB/C+UXzPO+N1+hZ55ZXS8MPGPgaV9VM1EysEdyfm2Y/rn935GGJwtm67fz+6dyKkCAzLsMjR5DvcxxlMzf6Gs9TrX7PBNwIDAQAB
TTL: Your preference, but typically 1 hour.
Notes:
1. When creating a new record in a DNS zone file, the host name normally is not fully qualified. If you are editing the zone file for the example.com zone, it should not be necessary to enter the fully-qualified domain name in the “host” section. Be sure to check the documentation for whatever DNS you are running if you are unsure of this.
2. We are assuming a DKIM selector value of “default”. For the purposes of DKIM authentication, external sites will always check DNS for a TXT record belonging to “selector”._domainkey.”hostname”. In our example, external sites would be looking for the TXT record belonging to default._domainkey.listserv.example.com .
3. The TXT value should not break and wrap as displayed above. It should be one continuous line of text. The value of “p=” is the text of the public key from between the lines
Once you have created your DNS entries and LISTSERV configuration for DKIM, you will want to test it.
Listserv has a built-in Deliverability Assessment report which can be reached in the web interface at Server Administration -> Site Configuration -> Deliverability Assessment. The first screen looks like the following:
Unless you have multiple domains set up in LISTSERV, there should be no reason to change the pre-populated values. If they are correct, simply click Submit. This will yield the report:
The green shields indicate that, so far as LISTSERV is concerned, you have properly configured the DKIM DNS entry, and LISTSERV itself is properly configured to sign outbound messages with DKIM. If either or both of the shields are not green, you need to recheck your DNS entry and LISTSERV configuration, and correct any errors before running the report again.
You can also find the instructions on how to set up DKIM and SPF FOR L-Soft EASE, here.
Add an L-Soft EASE DKIM key in Valimail
You can find more detailed information on how to add a DKIM key in Valimail, here:
Configuring SPF authentication for your L-Soft EASE emails
Once you establish that L-Soft EASE is an authorized sender for your domain, you will need to add the service in your Enabled Senders.
You will find more detailed information on how to add a service for your domain in Valimail, here:
Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.