'Multiple DKIM and SPF records on Google Apps/G Suite/Google Workspace for MailChimp
I'm looking to add SPF and DKIM to my domain for MailChimp.
The domain in question is running through G Suite and has the following TXT record for SPF:
v=spf1 include:_spf.google.com ~all
The domain also has a TXT record for Google DKIM.
I've read via the MailChimp and G Suite docs that you shouldn't add more than one SPF record. With this in mind, would this be the correct way of adding MailChimp's SPF record?
v=spf1 include:_spf.google.com ~all include:servers.mcsv.net ?all
Do the same rules apply for DKIM or am I okay to add multiple records for this?
Solution 1:[1]
No, you can only have a single SPF record for a domain. The right way to combine those is:
v=spf1 include:_spf.google.com include:servers.mcsv.net ~all
You should never use ?all as the default action – it's as bad as not having SPF at all.
DKIM is different – you need a selector as the DNS name, so if Mailchimp uses a selector called mc (their docs will say), you would put their key in a record called mc._domainkey.example.com (substituting your domain for example.com). You can have many such selector records, and they are all independent.
You might like to look into creating a DMARC config as well.
Solution 2:[2]
The issue is, when we add a custom record with two SPF servers
Google Workspace has default rule with add again this TXT record :
"v=spf1 include:_spf.google.com ~all"
And then, it appears twice on the public TXT zone
Does that work ?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | |
| Solution 2 | Arn |