How do I set up BoldTrail so its email passes DMARC?

What does BoldTrail ask me to publish?

Before your emails can be reliably delivered, your email domain needs three DNS authentication records: SPF , DKIM , and DMARC .

BoldTrail prints these values in its own documentation, the same for every customer.

BoldTrail makes the other values for your account, so we do not print them here.

include:sendgrid.net ip4:198.202.27.0/24

Where in BoldTrail are my values shown?

Profile page - Look for the DNS status button in your profile side panel.

In BoldTrail, open your profile page and use the DNS status button in the profile side panel.

Copy each value from there exactly as shown, and add each record at your DNS host.

How do I add BoldTrail to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add include:sendgrid.net ip4:198.202.27.0/24 inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

Will p=reject block BoldTrail email?

If your current record uses p=quarantine or p=reject , that's fine - the BoldTrail value is a recommendation, not a requirement. Your stricter policy will not break authentication.

Not once BoldTrail signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records BoldTrail gives you are on your domain.

BoldTrail says a stricter DMARC policy than its suggested one does not break authentication.

BoldTrail also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.

Before you raise your policy, read your DMARC reports and check that email from BoldTrail passes.