Email senders · Freshdesk

How do I set up Freshdesk so its email passes DMARC?

Publish the records Freshdesk shows in your account for your domain.

Last read from the sources at the foot of this page.

Check my firm
01

What does Freshdesk ask me to publish?

Domain verification is a mandatory check if you are using the default Freshdesk server for email communication. You can perform domain verification via Domain Key Identified Mail (DKIM )

Freshdesk prints these values in its own documentation, the same for every customer.

Freshdesk makes the other values for your account, so we do not print them here.

SPF: add inside your one SPF record
include:email.freshdesk.com
02

Where in Freshdesk are my values shown?

Go to Admin > Channels > Email > Advanced Settings> Configure DKIM . Copy the system-generated settings (4 CNAME records) to publish in your DNS server/domain provider's account.

In Freshdesk, go to Admin, then Channels, then Email, then Advanced Settings, then Configure DKIM.

Copy each value from there exactly as shown, and add each record at your DNS host.

03

How do I add Freshdesk to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add include:email.freshdesk.com inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

An SPF record may make at most 10 DNS lookups. Each include counts, and so do the includes inside it. Past 10, the check fails, so remove services you no longer use before you add a new one.

04

Will p=reject block Freshdesk email?

ensure that your business is Domain-based, Message Authentication, Reporting, and Conformance (DMARC) compliant, which includes SPF check within the DKIM records

Not once Freshdesk signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Freshdesk gives you are on your domain.

Freshdesk says domain verification with DKIM is required to be DMARC compliant, and it includes the SPF check.

Before you raise your policy, read your DMARC reports and check that email from Freshdesk passes.

Sources

Where does this come from?

Related
06 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy