topic Re: DKIM & DMARC settings in Email Deliverability

DKIM & DMARC settings

concierge — Tue, 16 May 2023 14:31:50 GMT

Hi everyone, can somebody explain to me how to set DKIM and DMARC properly?
Our domain conciergedigitale.it is registered and hosted by Aruba.it
We're using Google Workspace/Gmail as email provider.
We've connected our email sending domain on HubSpot.
SPF record should be ok.
But can't find how to set the others 2 records properly.
A step by step explanation would be very very helpful since I was not able to find a solution nor here in the community nor in the KB.

Re: DKIM & DMARC settings

TomM2 — Tue, 16 May 2023 15:47:33 GMT

Hey @concierge it looks like you have no CNAMEs setup on your domain. https://dnschecker.org/all-dns-records-of-domain.php?query=conciergedigitale.it&rtype=ALL&dns=google

The HubSpot email sending domains are done through CNAMEs (using DKIM). Have you added the HubSpot email sending domains to your DNS provider? If so it appears that they are not propagating correctly.
If you go through the steps outlined on the knowledgebase article you should set up the email sending domains within HubSpot which will give you the CNAMEs which you need to copy into your DNS provider. You then set up these CNAMEs within your DNS provider and copy the values HubSpot gives you in.

If you've done this, there may be an issue with them propagating into your DNS provider. If you check the domain connection status within the HubSpot domain manager tool, does it give you any errors?

Re: DKIM & DMARC settings

concierge — Wed, 17 May 2023 06:48:32 GMT

Thanks Tom for your help.

As mentioned we had already connected our domain as email sending domain to HubSpot. I also repeated the operation (disconnected and then connected again) but I dind't find any CNAME record to copy from HubSpot.

So I still don't know what to do 🙂
We're not willing to connect the domain for the moment, just the email sending domain.

From my provider CNAME Reccord panel I actually see:

hs1-3978551._domainkey	conciergedigitale-it.hs10a.dkim.hubspotemail.net.
hs2-3978551._domainkey	conciergedigitale-it.hs10b.dkim.hubspotemail.net.
k1._domainkey	dkim.mcsv.net.

Note: we are not using a static IP.

I'm very confused! (And not an expert)

Another help would be very appreciated!
Thanks

Re: DKIM & DMARC settings

TomM2 — Wed, 17 May 2023 09:58:58 GMT

Hey @concierge that's understandable, it can be a confusing thing to set up! You absolutely do not need to connect your website domain to HubSpot to set up email sending domains don't worry!

I'm just checking the DNS settings on the domain conciergedigitale.it again and I still don't see any CNAME setup on this when using third party tools to check the CNAME.

In this case I'd follow up with your DNS provider (aruba.it) to find out why these CNAMEs aren't propagating correctly, there may be some settings on their side that is causing this, but since the CNAMEs aren't set up HubSpot has no way of recognising them.

If Aruba aren't able to help, feel free to drop me a Direct message, I'd be happy to take a look over a screenshare with you to see if there's anything further I can do to help if you like!

Re: DKIM & DMARC settings

concierge — Thu, 18 May 2023 06:53:31 GMT

I'll contact my DNS provider as suggested. Hope they will solve this matter.
I'll update the thread then.
Again, many thanks for your help.
Marco

Re: DKIM & DMARC settings

concierge — Thu, 18 May 2023 08:20:19 GMT

Hey Tom, Just received tha answer from Aruba, they say everything is ok, pls see below

the records are correctly set on the domain zone and seem to be correctly visited and resolved:
https://dnschecker.org/#CNAME/hs1-3978551._domainkey.conciergedigitale.it
https://dnschecker.org/#CNAME/hs2-3978551._domainkey.conciergedigitale.it

Also from other tools no anomalies are found.
https://www.whatsmydns.net/#CNAME/hs1-3978551._domainkey.conciergedigitale.it
https://www.whatsmydns.net/#CNAME/hs2-3978551._domainkey.conciergedigitale.it

I proceeded to reload the domain zone on our dns to re-propagate them, and he kindly invites you to carry out a new check this afternoon.

Re: DKIM & DMARC settings

TomM2 — Thu, 18 May 2023 11:53:20 GMT

Sounds good! It should be relatively straightforward, but each DNS provider can differ slightly so it's hard to tell for sure without seeing it. If you have no luck with the DNS provider feel free to let me know!