Publish SPF, DKIM and DMARC in Azure DNS through Blesta
Use PD Azure DNS to publish email authentication values supplied by your mail provider. SPF, DKIM and DMARC describe different parts of authentication, and their DNS records must match the service actually sending your messages.
Prepare domain-specific values
Collect the intended SPF policy, DKIM selector/value or CNAME targets, and the chosen DMARC policy. Identify all authorised senders before revising an existing SPF record. Customer-specific selectors and tenant targets should not be copied into a generic template unchanged.
Open Azure DNS → Zones → Records for the authoritative domain, or use My Tools in the client portal, then the DNS manager. Confirm both the correct resource group and registrar delegation.
Add the requested type
- Search for the current records at each requested hostname.
- For SPF, select TXT and enter the intended complete policy.
- For DKIM, use the provider’s exact selector name with the requested TXT or CNAME type.
- For DMARC, select TXT at the requested DMARC name and use the agreed policy.
- Save and reload to compare the full names, types and values.
Keep one intended SPF policy at a hostname; a second policy is not a way to add a sender. Azure TXT values at the same name share a record-set TTL. A CNAME selector cannot coexist with another ordinary record type at that same name.
Verify messages as well as DNS
Check authoritative publication and the provider’s domain validation, then inspect the authentication results on a controlled message. Publishing a DKIM key does not enable signing in the mail server. Publishing a DMARC policy is not a promise of inbox placement.
MX mail-routing records are a separate delivery task. If the DNS is correct but authentication fails, compare the actual message’s sender domain and DKIM selector with what was published before repeatedly replacing records.
For a refused save, retain the exact redacted result and review the relevant lock, quota, content policy or Azure action. Keep private verification values and app secrets out of support attachments.
See the PD Azure DNS Blesta guide for related tasks, or explore the module.
