Overview

This article shares information about adding DNS records such as DKIM and DMARC to Kerio Connect for protecting and securing your domain. The procedure covers adding DKIM and DMARC records and confirming the successful configuration using various platforms and methods.

Prerequisites

Access to the Kerio Connect Webadmin.

Access to the DNS Administration console.

Adding DKIM and DMARC Records

1. Log in to the Kerio Connect Webadmin.
2. Go to Open Configuration > Domains. 
3. Double-click on the necessary domain and, under the DomainKeys Identified Mail (DKIM) section, check the Sign outgoing messages from this domain with DKIM signature option.
   
   

   
   
   

4. Click on the Show public key... button and copy both the Record name and the TXT value.
   
   
   

   Note: DKIM TXT value cannot be changed to a custom option, as it is hardcoded in the source code. Additionally, please note that Kerio Connect does not support the c=relaxed/relaxed setting.

5. Open your DNS Hosting Administration. 
6. Go to Your_Domain_Name > Manage records > Add TXT record.
7. Paste both, the Record name and TXT value that you copied in step #4.
   
   

   
   
   

8. For the DMARC record, you can choose to either quarantine or reject the messages, as seen in the example screenshot below:
   
   

   

Back to top

Testing

There are various ways to confirm if the DKIM/DMARC records were configured correctly. Refer to the sections below to learn more:

• Appmaildev
• Mail-tester
• Dmarcian
• MxToolbox

Appmaildev

1. Open the Appmaildev website, and click on the Next Step button to generate a random email address.
   
   

   
   
   

2. Log in to your Webmail. 
3. Compose a new email and send it to the newly generated email address.
4. Confirmation: You receive a report like the following:
   
   

   

Mail-tester

1. Open the Mail-tester website and type in your Domain name. 
2. Click on the CHECK SPF & DKIM KEYS.
   
   

   
   
   

3. Confirmation: You receive a report like the following:
   
   

   

Dmarcian

1. Go to the Dmarcian website and type your domain name.
2. Click on the Check Domain button.
   
   

   
   
   

3. Confirmation: You receive a report like the following:
   
   

   

MxToolbox

1. Go to the DKIM MxToolbox website or DMARC MxToolbox website and type in your domain.
2. Click on the DKIM Lookup or DMARC Lookup button.

   • DKIM

     
     
     

   • DMARC

     
     
     

3. Confirmation: You receive a report like the following:
   

    

   • DKIM

     

      

   • DMARC

     

Back to top

Further Reading About DKIM/DMARC

If you would like to learn more about DKIM/DMARC, please feel free to read the following articles: 

• Overview of DMARC
• Protecting your domain with DMARC
• Configuring DNS for DKIM in Kerio Connect
• Adding DKIM Records to Kerio Connect