Free Email Security Test

BIND zone file

example.com.            IN  TXT  "v=spf1 include:_spf.google.com -all"
selector1._domainkey    IN  TXT  "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCg..."
_dmarc                  IN  TXT  "v=DMARC1; p=reject; rua=mailto:dmarc@example.com; adkim=s; aspf=s"

Cloudflare (API)

# SPF
{ "type": "TXT", "name": "example.com",
  "content": "v=spf1 include:_spf.google.com -all", "ttl": 3600 }

# DKIM
{ "type": "TXT", "name": "selector1._domainkey.example.com",
  "content": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQE...", "ttl": 3600 }

# DMARC
{ "type": "TXT", "name": "_dmarc.example.com",
  "content": "v=DMARC1; p=reject; rua=mailto:dmarc@example.com; adkim=s; aspf=s",
  "ttl": 3600 }

AWS Route 53 (change-resource-record-sets)

{
  "Changes": [
    {
      "Action": "UPSERT",
      "ResourceRecordSet": {
        "Name": "example.com.",
        "Type": "TXT",
        "TTL": 3600,
        "ResourceRecords": [
          { "Value": "\"v=spf1 include:amazonses.com -all\"" }
        ]
      }
    },
    {
      "Action": "UPSERT",
      "ResourceRecordSet": {
        "Name": "_dmarc.example.com.",
        "Type": "TXT",
        "TTL": 3600,
        "ResourceRecords": [
          { "Value": "\"v=DMARC1; p=reject; rua=mailto:dmarc@example.com; adkim=s; aspf=s\"" }
        ]
      }
    }
  ]
}