✦ All-in-One Mail Security
Mail Domain
Security Check
Check SPF, DKIM, DMARC and Reverse DNS in one go — for free.
SPF
Sender Policy Framework
DKIM
Email Signing
DMARC
Policy & Reporting
PTR
Reverse DNS
Check with your email provider
📋
SPFReadySender Policy Framework — authorized mail servers.
🔑
DKIMReadyDomainKeys Identified Mail — email signing.
🛡️
DMARCReadyDomain-based Message Authentication.
🔄
PTR / Reverse DNSReadyReverse DNS of SPF-authorized IPs.
DNS Record Generator Tools
Generate DMARC, SPF and MX records — copy & paste into your DNS provider
Required field
1–100 %, recommended: 100 %
Multiple: mailto:a@example.com,mailto:b@example.com
Many providers no longer send forensic reports
Generated Record
DNS name: _dmarc.yourdomain.com · Type: TXT
Tag Reference
v
DMARC1
Version — always DMARC1, required
p
none / quarantine / reject
Policy for the domain — required
sp
none / quarantine / reject
Policy for subdomains (default: same as p)
pct
0–100
Percentage of messages the policy applies to
rua
mailto:…
Recipient for daily aggregate reports
ruf
mailto:…
Recipient for forensic reports
adkim
r / s
DKIM alignment — relaxed allows subdomains
aspf
r / s
SPF alignment
ri
seconds (default 86400)
Reporting interval in seconds
fo
0 / 1 / d / s
Conditions for forensic reports
IP Addresses (ip4:)
A Record Hostnames (a:)
Authorize specific DNS hostnames — the IP behind the A record will be allowed.
Email Service Providers
Custom Includes
~all = mark & accept, -all = reject
Generated Record
DNS name: @ (root domain) · Type: TXT
v=spf1 ~all
MX Entries
Priority
Mail Server
Generated Records
Add each row as a separate MX record in your DNS provider.