Sign in and Edit DNS Records
- Sign in to the AWS Management Console and open the Route 53 console
- In the navigation pane, choose 'Hosted Zones'
- On the 'Hosted Zones' page, choose the name of the domain that you want to configure
- Choose `Create Record Set` to add a new record
DMARC
- Create a record with:
Name: _dmarc
Type: NS
Value: ns.vali.email - Set the TTL to 600
(You can pick another Time To Live value, but we recommend 600 seconds) - Click 'Create'
- Delete the “_dmarc” TXT record from your DNS zones after you’ve added the NS record if one exists
DKIM
Just as you've created an NS record for the _dmarc subdomain, now you will need to create a similar one for the _domainkey subdomain.
- Add another record set
- The NS record should have a name of _domainkey with a value of ns.vali.email. and a TTL of 3600
SPF
To delegate SPF to Valimail for email authentication, you'll need to add a TXT record that includes Valimail's SPF macro.
Add the following TXT record for your domain:
- Name: Domain.com.
- Type: TXT
- Value: v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
- TTL: 600 seconds
NOTE: if you're adding the TXT record by script, be aware of escape characters necessary to keep the macro together. You may need to use double percent signs eg:
v=spf1 include:%%{i}._ip.%%{h}._ehlo.%%{d}._spf.vali.email ~all"Read more about Valimail's SPF solution.
