Often, I need to quickly set up a website for someone who is not using email at the moment (or may never). These are the DNS records I add in order to help prevent spam. Note: Do not set these if you need to send email from the website, like from a contact form, registration system, or shopping cart.
Type | Host | Answer |
TXT | @ | v=spf1 -all |
TXT | *._domainkey.<your_domain>.com | v=DKIM1; p= |
TXT | _dmarc.<your_domain>.com | v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s |
And as a reminder to myself, besides the A record, I also always add a record to handle www:
Type | Host | Answer |
CNAME | www | <your_domain>.com |