Phone Lines icon GFI Support

Articles in this section

Adding DKIM and DMARC Records to Kerio Connect

Author: Vladyslav Velychko Updated

Overview

This article shares information about adding DNS records such as DKIM and DMARC to Kerio Connect for protecting and securing your domain. The procedure covers adding DKIM and DMARC records and confirming the successful configuration using various platforms and methods.

 

Prerequisites

Access to the Kerio Connect Webadmin.

Access to the DNS Administration console.

 

Adding DKIM and DMARC Records

Note: Please note that Kerio Connect does not support DKIM/DMARC for incoming emails, but only for outgoing messages.
  1. Log in to the Kerio Connect Webadmin.
  2. Go to Open Configuration > Domains. 
  3. Double-click on the necessary domain and, under the DomainKeys Identified Mail (DKIM) section, check the Sign outgoing messages from this domain with DKIM signature option.

    1.png

  4. Click on the Show public key... button and copy both the Record name and the TXT value.

    2.png

    Note: DKIM TXT value cannot be changed to a custom option, as it is hardcoded in the source code. Additionally, please note that Kerio Connect does not support the c=relaxed/relaxed setting.

  5. Open your DNS Hosting Administration. 
  6. Go to Your_Domain_Name > Manage records > Add TXT record.
  7. Paste both, the Record name and TXT value that you copied in step #4.

    3.png

  8. For the DMARC record, you can choose to either quarantine or reject the messages, as seen in the example screenshot below:

    4.png

 

Back to top

 

Testing

There are various ways to confirm if the DKIM/DMARC records were configured correctly. Refer to the sections below to learn more:

 

Appmaildev

  1. Open the Appmaildev website, and click on the Next Step button to generate a random email address.

    Kerio.gif

  2. Log in to your Webmail. 
  3. Compose a new email and send it to the newly generated email address.
  4. Confirmation: You receive a report like the following:

    6.png

 

Mail-tester

  1. Open the Mail-tester website and type in your Domain name. 
  2. Click on the CHECK SPF & DKIM KEYS.

    7.png

  3. Confirmation: You receive a report like the following:

    8.png

 

Dmarcian

  1. Go to the Dmarcian website and type your domain name.
  2. Click on the Check Domain button.

    9.png

  3. Confirmation: You receive a report like the following:

    10.JPG

 

MxToolbox

  1. Go to the DKIM MxToolbox website or DMARC MxToolbox website and type in your domain.
  2. Click on the DKIM Lookup or DMARC Lookup button.

    • DKIM

      11.png

    • DMARC

      12.png

  3. Confirmation: You receive a report like the following:

     

    • DKIM

      13.png

       

    • DMARC

      14.png

Back to top

 

Further Reading About DKIM/DMARC

If you would like to learn more about DKIM/DMARC, please feel free to read the following articles: 

Related articles