<p>Email deliverability is critical for your business communications. This guide explains how to configure DNS records that help your emails pass spam filters.</p>
<h5>SPF (Sender Policy Framework)</h5>
<p>SPF tells receiving mail servers which IP addresses are authorized to send email for your domain. Add this TXT record to your DNS zone:</p>
<pre><code>v=spf1 +a +mx +ip4:YOUR_SERVER_IP ~all</code></pre>
<h5>DKIM (DomainKeys Identified Mail)</h5>
<p>DKIM adds a digital signature to your outgoing emails. In Virtualmin:</p>
<ol>
<li>Go to <strong>Email → DKIM</strong></li>
<li>Click <strong>Enable DKIM Signing</strong></li>
<li>Copy the generated TXT record and add it to your DNS zone</li>
</ol>
<h5>DMARC (Domain-based Message Authentication)</h5>
<p>DMARC tells receiving servers how to handle emails that fail SPF or DKIM checks. A basic DMARC record:</p>
<pre><code>v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.co.za</code></pre>
<p>Start with p=none (monitoring mode) and move to p=quarantine or p=reject once you confirm all legitimate email is authenticating correctly.</p>