Applicable Products: Enforce
Valimail's Enforce product provides domain-based email authentication monitoring and analysis capabilities for your domain. In addition to the main domain, Enforce also supports monitoring subdomains.
Adding a subdomain
To Add a subdomain in Valimail, log in to your account and follow these steps:
Click on DOMAINS on the left side of the page.
Click on the domain name.
Scroll down to the Email Subdomains section and click on ADD EMAIL SUBDOMAIN.
4. Type the subdomain in the Name field, then click on ADD EMAIL SUBDOMAIN.
Add a separate DMARC policy to a subdomain
The DMARC record published on the organizational domain is automatically inherited by all the subdomains under the parent domain. The reasons to publish a DMARC record on a subdomain are:
Set a DMARC policy that is different than the one enforced by the parent domain.
Send RUA and/or RUF reports to a different destination than the one used by the parent domain.
To manage a DMARC record for a subdomain in Valimail, you will have to add a separate DMARC policy for this subdomain. When adding the subdomain to the account, check the "Add a separate DMARC policy to this subdomain" box at the bottom of the window.
If you need to add a separate DMARC policy to this subdomain that already exists in your configuration, follow these steps:
Go to DOMAINS.
Click on your domain name.
Scroll down to the subdomain and click on the pencil button.
Check "Add a separate DMARC policy to this subdomain" and click EDIT EMAIL SUBDOMAIN.
Once the separate DMARC policy is added to this subdomain, you will need to point the DMARC record to Valimail following the instructions here.
Changing the DMARC policy for a subdomain
Once the separate DMARC policy is added and the DMARC record is pointed to Valimail for the subdomain, you can change the DMARC policy following these steps:
Go to DOMAINS.
Click on your domain name
Scroll down to the subdomain and click on it.
Click on the DMARC Policy.
Choose the desired policy.
Click on CHANGE POLICY.
When to point the SPF and DKIM records to Valimail for a subdomain
The main reasons for pointing the SPF and DKIM records to Valimail, are to overcome the 10 DNS lookup limit (when you have multiple senders in your SPF record) and to make it easier to manage multiple DKIM records. There are times when the SPF and DKIM records do not need to be pointed to Valimail, especially if the subdomain is dedicated to one sending service. Check the following article to see when to point the SPF and DKIM records to Valimail.