In short: In SiteWorx, configure SPF, DKIM and DMARC under Administration > Mail Options. If DNS is hosted elsewhere, publish the generated records at that DNS provider instead.
Before changing records
- List every legitimate service that sends using the domain.
- Confirm where the authoritative DNS zone is hosted.
- Save the existing TXT records.
- Choose a mailbox or reporting service able to receive DMARC aggregate reports.
1. Configure SPF
- Open Administration > Mail Options > SPF.
- Select the domain and use the wizard or advanced interface.
- Authorise only the systems that genuinely send for the domain.
- Publish one combined SPF record and validate it.
2. Enable DKIM
- Open Administration > Mail Options > DKIM.
- Enable a key for the domain.
- If SiteWorx is not authoritative for DNS, copy the complete selector record to the external DNS zone.
- Send a test message and confirm that the receiving headers show
dkim=pass.
3. Add DMARC
- Open Administration > Mail Options > DMARC.
- Begin with a monitoring policy such as
p=none. - Configure aggregate reporting and use relaxed alignment unless there is a specific reason for strict alignment.
- Review reports before increasing enforcement.
Avoid accidental rejection: Do not move directly to
p=reject until every legitimate sender has been identified and SPF or DKIM alignment has been verified.Test the result
Inspect the Authentication-Results header of messages sent to an independent provider. Check SPF, DKIM and DMARC separately and test every sending platform.