[{"data":1,"prerenderedAt":118},["ShallowReactive",2],{"seo-verification":3,"blog-spf-dkim-dmarc-delivrabilite-emails-pro-en":6},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"id":7,"slug":8,"title":9,"excerpt":10,"readTime":11,"views":12,"isPinned":13,"publishedAt":14,"category":15,"categories":20,"featuredImage":22,"bgImage":23,"posterImage":24,"relatedSolution":22,"intro":25,"sections":26,"ctaTitle":69,"ctaBody":70,"ctaButton":71,"ctaUrl":72,"relatedPosts":73},199,"spf-dkim-dmarc-delivrabilite-emails-pro","SPF, DKIM, DMARC: passing the 5,000-email threshold","Gmail and Outlook reject senders without aligned SPF, DKIM and DMARC with an SMTP 550 error. Here is how to configure all three records.",7,0,false,"2026-08-01T00:00:00+00:00",{"id":16,"name":17,"slug":18,"color":19,"icon":18},11,"Business Email","emails","bg-cyan-500\u002F10 text-cyan-400",[21],{"id":16,"name":17,"slug":18,"color":19,"icon":18},null,"\u002Fblog\u002Fcovers\u002Fbg.svg","\u002Fblog\u002Fcovers\u002Fspf-dkim-dmarc-delivrabilite-emails-pro-poster.svg","Since May 2025, Gmail and Outlook no longer filter suspicious emails into the spam folder — they reject them with an SMTP 550 error, before the recipient ever sees them. The rule applies from 5,000 messages per day to Gmail, and covers any sender without DMARC alignment.",[27,31,40,43,62,66],{"type":28,"title":29,"body":30},"h2","Why the rules changed in 2024-2025","Google published its Sender Guidelines in October 2023 and tightened them in April 2024: any sender dispatching more than 5,000 messages per day to Gmail accounts must have SPF, DKIM and a DMARC record in place. Microsoft aligned Outlook with the same requirements in May 2025. An email rejected with a 550 never reaches the recipient's inbox. The sender receives a bounce; the message is lost.",{"type":32,"title":33,"items":34},"ul","What these three records give you in practice",[35,36,37,38,39],"**Guaranteed deliverability** — Gmail and Outlook servers accept the message instead of rejecting it with a 550.","**Protection against spoofing** — SPF and DKIM prevent a third party from sending emails in your name from an unauthorized server.","**DMARC reports** — the rua record sends you daily reports on which servers sent email under your domain.","**Sender reputation preserved** — DMARC alignment at p=quarantine then p=reject protects your domain against phishing campaigns.","**Compliance with major platform requirements** — mandatory for Mailchimp, Brevo, SendGrid and most ESPs since 2024.",{"type":28,"title":41,"body":42},"The three DNS records: prerequisites","SPF, DKIM and DMARC are three separate DNS records published in the sending domain's zone. SPF (TXT on your-domain.com) lists authorized servers. DKIM (TXT on mail._domainkey.your-domain.com) adds a cryptographic signature. DMARC (TXT on _dmarc.your-domain.com) tells receiving servers what to do with emails that fail both checks. DMARC alignment — required since 2025 — means the domain in From must match the domain verified by SPF or DKIM.",{"type":44,"title":45,"steps":46},"steps","Configure SPF, DKIM and DMARC step by step",[47,50,53,56,59],{"title":48,"body":49},"Publish the SPF record","Create a TXT record at the root of your domain listing authorized sources, for example `v=spf1 include:_spf.your-provider.com ~all`. Only one SPF record per domain.",{"title":51,"body":52},"Enable and publish the DKIM key","Your mail server or ESP generates a key pair. Publish the public key in a TXT record under the chosen selector, for example mail._domainkey.your-domain.com.",{"title":54,"body":55},"Add the DMARC record with reports","Create a TXT record on _dmarc.your-domain.com. Starting value: `v=DMARC1; p=none; rua=mailto:dmarc@your-domain.com`. In p=none mode no email is rejected.",{"title":57,"body":58},"Verify sender domain alignment","Send a test email and check received headers for Authentication-Results mentioning spf=pass, dkim=pass and dmarc=pass. Tools like MXToolbox or mail-tester.com allow this check.",{"title":60,"body":61},"Tighten DMARC after two to four weeks of reports","When all legitimate sources pass SPF and DKIM, move to p=quarantine, then to p=reject. With p=reject any failing email is refused with SMTP 550.",{"type":63,"title":64,"body":65},"tip","Security: moving to p=reject and monitoring reports","The p=reject mode is the final goal: it protects your domain against phishing and meets strict Gmail and Outlook requirements. Verify all sending sources sign with DKIM. Enable the ruf tag for forensic reports.",{"type":28,"title":67,"body":68},"After configuration: monitor and maintain","SPF, DKIM and DMARC are not one-time settings. A new email provider added without updating SPF immediately triggers alignment failures. Plan a quarterly review to check all active sources.","Host your website and emails with full DNS access","With ServOrbit web hosting, you manage your DNS zone, SPF, DKIM and DMARC records, and SMTP configuration from a single space.","Host my website and emails","\u002Fhebergement-web",[74,93,107],{"id":75,"slug":76,"title":77,"excerpt":78,"readTime":79,"views":80,"isPinned":13,"publishedAt":81,"category":82,"categories":87,"featuredImage":22,"bgImage":23,"posterImage":89,"relatedSolution":90},116,"certificats-ssl-lets-encrypt-vps","Free SSL Certificates with Let's Encrypt on a VPS","Deploy Let's Encrypt on your VPS: free HTTPS, automatic renewal, an A+ on SSL Labs with Nginx, Caddy or Traefik in Docker.",8,292,"2026-02-24T00:00:00+00:00",{"id":79,"name":83,"slug":84,"color":85,"icon":86},"Security & Monitoring","securite-monitoring","bg-rose-500\u002F10 text-rose-400","security",[88],{"id":79,"name":83,"slug":84,"color":85,"icon":86},"\u002Fblog\u002Fcovers\u002Fcertificats-ssl-lets-encrypt-vps-poster.svg",{"categorySlug":91,"appSlug":92},"securite","certbot",{"id":94,"slug":95,"title":96,"excerpt":97,"readTime":11,"views":12,"isPinned":13,"publishedAt":98,"category":99,"categories":104,"featuredImage":22,"bgImage":23,"posterImage":106,"relatedSolution":22},166,"rattacher-domaine-vps-un-clic","Point a Domain at Your VPS in One Click, With Managed DNS Included","Attach a domain to your VPS in one click and manage your managed DNS zone (A, AAAA, CNAME, MX, TXT) from your client area.","2026-01-19T00:00:00+00:00",{"id":100,"name":101,"slug":102,"color":103,"icon":102},9,"News","actualites","bg-sky-500\u002F10 text-sky-400",[105],{"id":100,"name":101,"slug":102,"color":103,"icon":102},"\u002Fblog\u002Fcovers\u002Frattacher-domaine-vps-un-clic-poster.svg",{"id":108,"slug":109,"title":110,"excerpt":111,"readTime":112,"views":12,"isPinned":13,"publishedAt":113,"category":114,"categories":115,"featuredImage":22,"bgImage":23,"posterImage":117,"relatedSolution":22},125,"imunify360-securite-serveur-expliquee","Imunify360: server security explained","Imunify360 explained: WAF firewall, antivirus, proactive detection and patch management for cPanel\u002FWHM. What it is for and why to enable it.",6,"2026-02-19T00:00:00+00:00",{"id":79,"name":83,"slug":84,"color":85,"icon":86},[116],{"id":79,"name":83,"slug":84,"color":85,"icon":86},"\u002Fblog\u002Fcovers\u002Fimunify360-securite-serveur-expliquee-poster.svg",1785628461903]