Send Mail From Other Services With Your Domain
CDNShark publishes a strict SPF record, v=spf1 mx -all, which means "only our mail servers may send mail for this domain". If something else also sends as your domain, such as a newsletter tool, a CRM, a shop or a website contact form using an outside mail service, its mail will fail SPF and may be rejected. Authorise it as below.
1. Add the service to your SPF record
A domain may have only one SPF record, so extend ours instead of adding a second one. Insert the service's include: before -all:
v=spf1 mx include:servers.mcsv.net -all (Mailchimp)
v=spf1 mx include:_spf.google.com -all (Google Workspace)
v=spf1 mx include:spf.protection.outlook.com -all (Microsoft 365)
v=spf1 mx include:sendgrid.net include:mailgun.org -all (two services)Use the exact include your provider documents. Keep the total under 10 includes/lookups.
- Domain on CDNShark DNS: edit the TXT record at
@that starts withv=spf1in DNS Management. - DNS elsewhere: edit it at your DNS provider.
If email is ever disabled and enabled again on the domain, the SPF record is reset to v=spf1 mx -all. Add your includes back afterwards.
2. Add the service's DKIM record
Most services also ask you to add their own DKIM record (a TXT or CNAME at <something>._domainkey). Add it alongside ours; DKIM records with different names don't conflict.
3. Check
Send a test from the service to a Gmail address and open Show original: SPF, DKIM and DMARC should all say PASS.
Website contact forms
Forms on your website can send through one of your mailboxes over SMTP (an SMTP plugin, with the mailbox's address and password). Then no SPF change is needed, but the mailbox's Sending Limits and Deliverability apply.