Outlook SPF DKIM DMARC Setup
Budget: £750 – £1,500 GBP
I need SPF, DKIM and DMARC records configured so every message that leaves our Outlook-based Microsoft 365 domain passes authentication checks. The mailboxes are used mainly for internal communication, but we occasionally copy external partners, and too many messages are landing in junk folders or being flagged as “unauthenticated.”
Here is the situation:
• Platform: Microsoft 365 / Outlook
• Domain access: I’m not entirely sure whether I hold the DNS credentials, so I will lean on your guidance to locate or delegate the right login.
• No marketing or bulk sending—just clean, authenticated mail between staff and trusted contacts.
What I expect from you
1. Audit the current DNS zone and note any existing SPF, DKIM or DMARC entries.
2. Provide the exact TXT records (and CNAME if needed for DKIM) that align with Microsoft 365 best practices; SPF should cover all legitimate hosts, DKIM must sign correctly, and DMARC should start at p=none with reporting so we can monitor impact.
3. Walk me through applying those records—either inside the registrar panel or via a quick screen-share if access is available—and verify propagation.
4. Run final tests (e.g., MXToolbox, Microsoft Remote Connectivity Analyzer) and supply screenshots or logs showing “pass” for SPF, aligned DKIM, and an accepted DMARC policy.
5. Deliver a brief hand-over note explaining how to adjust policies (moving from monitor to quarantine/block) and where to find the daily DMARC reports.
Acceptance criteria: all outbound mail tested from at least two different accounts must return SPF=PASS, DKIM=PASS (aligned), DMARC=PASS, and no new warnings in Microsoft 365 security center.
Let me know your availability and any information you need from me to get started.
Here is the situation:
• Platform: Microsoft 365 / Outlook
• Domain access: I’m not entirely sure whether I hold the DNS credentials, so I will lean on your guidance to locate or delegate the right login.
• No marketing or bulk sending—just clean, authenticated mail between staff and trusted contacts.
What I expect from you
1. Audit the current DNS zone and note any existing SPF, DKIM or DMARC entries.
2. Provide the exact TXT records (and CNAME if needed for DKIM) that align with Microsoft 365 best practices; SPF should cover all legitimate hosts, DKIM must sign correctly, and DMARC should start at p=none with reporting so we can monitor impact.
3. Walk me through applying those records—either inside the registrar panel or via a quick screen-share if access is available—and verify propagation.
4. Run final tests (e.g., MXToolbox, Microsoft Remote Connectivity Analyzer) and supply screenshots or logs showing “pass” for SPF, aligned DKIM, and an accepted DMARC policy.
5. Deliver a brief hand-over note explaining how to adjust policies (moving from monitor to quarantine/block) and where to find the daily DMARC reports.
Acceptance criteria: all outbound mail tested from at least two different accounts must return SPF=PASS, DKIM=PASS (aligned), DMARC=PASS, and no new warnings in Microsoft 365 security center.
Let me know your availability and any information you need from me to get started.