As a Wrap up Web customer you can choose to either use our mail servers to run your email or another mail server.
In some cases customers prefer to use Microsoft Office 365. This guidance runs through the DNS Records that need to be in place if your nameservers are with Wrap up Web, you wish to use Office 365 for your emails and ensure your email setup is configured to be both secure and authenticated.
Default DNS Records for Office 365
If using Office 365 typically you will already have the following default DNS records in place.
Record Name: yourdomainname.com
Type: MX
Value: yourdomainname-com.mail.
Record Name: autodiscover.yourdomainname.com
Type: CNAME
Value: autodiscover.outlook.com.
Ensuring Office 365 Authentication and Security
If you look at the guidance from Microsoft, they recommend that SPF, DKIM and DMARC records are set up in DNS to achieve full email security and authentication when using Office 365.
https://learn.microsoft.com/en-us/defender-office-365/email-authentication-about
Wrap up Web can ensure both the SPF and DMARC Records are correctly set up
If using Office 365, ask Wrap up Web to check the following DNS records are in place and correctly set up.
Typically the SPF Record is a TXT Type Record and looks like this
Record Name: yourdomainname.com
Type: TXT
Value: v=spf1 include:spf.protection.
Typically the DMARC Record is a TXT Type Record and looks like this
Record Name: _dmarc.yourdomainname.com
Type: TXT
Value: v=DMARC1;p=quarantine;sp=none;adkim=r;aspf=r;pct=100;rf=afrf;ri=86400
Check DMRC record is present
You can check if the DMARC record is present and correctly set up using the link below.
Type in your domain name and press the ‘DMARC Lookup’ Button. You should see a row of green ticks if set up correctly.
https://mxtoolbox.com/dmarc.aspx
Generating and Publishing Office 365 DKIM CNAME Records
DKIM records should be in the form of CNAME record types. Typically there are two DKIM records that need to be present in your DNS for Office 365 and should look similar to the following…
Record Name: selector1._domainkey
Type: CNAME
Value: selector1-<yourdomain-com>._domainkey.<office365servername>.onmicrosoft.com
Record Name: selector2._domainkey
Type: CNAME
Value: selector2-<yourdomain-com>._domainkey.<office365servername>.onmicrosoft.com
However, the generation of these keys must be through Office 365 itself. Once generated in Office 365 they can then be published in your DNS Records.
Check if the SPF and Office 365 DKIM CNAME records are present
You can check if the SPF records and Office 365 DKIM records are present for your domain name using the tool below.
https://www.mail-tester.com/spf-dkim-check
Type your domain name in the ‘Domain Name’ box then type the following in the ‘DKIM Selector’ box
selector1
Press the ‘Check SPF & DKIM Keys’ button. The result should present at least 1 SPF record and whether you have a record present for
selector1._domainkey.yourdomainname.com
Type the following in the ‘DKIM Selector’ box
selector2
Press the ‘Check SPF & DKIM Keys’ button. The result should present at least 1 SPF record and whether you have a record present for
selector2._domainkey.yourdomainname.com
How to generate the DKIM CNAME Records in Office 365
The following video runs through setting up SPF, DMARC and DKIM in Office 365
You may wish to watch the whole video to understand the process, however with SPF and DMARC already taken care of, you can run through the DKIM part to find out how to generate your own DKIM Records in Office 365.
SPF setup starts @5.20
DKIM setup starts @9.20
DMARC setup starts @12.35
Publishing your Office 365 DKIM CNAME Records
Once you have generated the DKIM Records and you are comfortable adding them to your DNS, please go ahead using your Wrap up Web Client Portal.
If you would rather Wrap up Web do this for you, after generation of the DKIM Keys, simply copy and paste them into an email and send them to us.
Please note: Once the DKIM CNAME records have been published, synchronisation to Office 365 can take a few minutes to as many as 4 days based on your specific DNS.
