How to set up DMARC for Xeams in Valimail

Updated over a week ago

This article covers the SPF and DKIM authentication processes for Xeams and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

Configuring DKIM authentication for your Xeams emails

  • Login as admin to Xeams' web interface

  • Click DKIM under Filter Management

  • The following page has two sections:

    • You can specify a spam score on the left hand side for incoming emails. This score is assigned to a message fails a DKIM authentication. This score is only assigned if a signature is found but is invalid.

    • Specify domains that you would like to sign when sending outbound emails on the right hand side

Preparing your domain for outbound messages

To add your domain, simply specify your domain name along with a selector value. Selector can be any arbitrary value and its purpose is to differentiate multiple SMTP Servers in your company. Consider a scenario where you have two SMTP servers: Xeams and Exchange and outbound emails are sent from both of them. In this case you can use the word "xeams" for the Selector in Xeams and "Exchange" for the other SMTP server.
Xeams automatically creates a pair of Private/Public keys in the background. These keys are saved in $INSTALL_DIR\config\dkimKeys folder. It is strongly recommended you backup this folder. To view the public key value for your domain, click View Details for the desired domain name.
When a domain is added in Xeams, it remains Inactive until the public key is entered in your DNS server. This is done by design to avoid signing an outbound email without a DNS entry.

You can also find the instructions on how to set up DKIM and SPF for Xeams, here.

Add a Xeams DKIM key in Valimail

You can find more detailed information on how to add a DKIM key in Valimail, here:

Configuring SPF authentication for your Xeams emails

Once you establish that Xeams is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

Did this answer your question?