The correct configuration of the sender domain and email authentication systems, such as DKIM and DMARC, helps protect the domain and improve the deliverability of communications.
These configurations are also necessary to meet the requirements set by major Mailbox Providers, such as Google and Yahoo and Microsoft, especially for senders who send large volumes of emails.
This article lists the most common alerts you may see in MagNews for a sender domain, what they mean, and how to resolve them.
You have not yet created the sender domain
What it means
You have not yet configured in MagNews the domain used in the sender email address of your communications.
Defining the sender domain allows you to configure DKIM, an authentication technology that enables providers to verify the authenticity of emails sent by MagNews and that the content has not been altered during transfer.
What to do
- Go to Settings > Brand Protection > Sender Domains.
- Click on New Sender Domain.
- Enter the domain and click Create Sender Domain.
- Complete the DKIM configuration.
For more details, see How to define the sender domain and configure DKIM.
The sender domain is not certified with DKIM
What it means
You have not yet configured DKIM for the sender domain.
DKIM allows providers to verify the authenticity of emails sent by MagNews and that the message content has not been modified during transfer. It is also a fundamental configuration for DMARC authentication and to meet the requirements set by major Mailbox Providers.
What to do
Configure DKIM:
- Go to Settings > Brand Protection > Sender Domains.
- Click on the relevant domain to view the TXT record to publish.
- Create the TXT record in the DNS panel of your hosting provider or registrar.
- Return to the sender domain configuration in MagNews and activate DKIM certification.
For more details, see How to define the sender domain and configure DKIM.
The sender domain has invalid DKIM
What it means
The sender domain has an invalid DKIM record. This means that the TXT record for DKIM certification, published in your domain's DNS management panel, is incorrect. An incorrect configuration can cause your emails to be classified as spam or even blocked.
What to do
- Verify the TXT record: check in your domain's DNS panel that there is a TXT record with the DNS Host Name and DKIM Key matching those indicated in the sender domain Information tab.
-
Access TXT record information: go to Settings > Brand Protection > Sender Domains.
- Click on the domain with invalid DKIM
- Check the Information tab
-
Edit the TXT record: If you are responsible for configuring the sender domain's DNS, update the TXT record directly from your hosting provider or registrar control panel.
If not, contact your IT team or whoever manages these configurations.
Contact our Help Desk support if you need further clarification on the DKIM record configuration error and how to fix it.
The sender domain has DKIM certification deactivated
What it means
The DKIM record is correctly published in the DNS, but certification has not yet been activated in MagNews.
As a result, emails sent from the platform are not yet signed with DKIM.
What to do
- Go to Settings > Brand Protection > Sender Domains.
- Click on the relevant domain.
- Click Activate Certification.
The sender domain does not implement DMARC
What it means
The sender domain does not publish a DMARC record.
DMARC is an authentication protocol that allows mail providers to verify the sender's identity and helps protect the domain from unauthorized use. It is also one of the requirements requested by major mail providers for senders who send large volumes of emails.
What to do
Ask your IT department or whoever manages the domain's DNS to publish a DMARC record.
To know which record to create and how to configure it correctly, see the guide How to create and configure a DMARC record.
After publishing, keep in mind that DNS changes propagation can take some time before the configuration is correctly detected.
If you do not have an internal IT department or resources with experience on this topic, you can rely on support from our IT/deliverability team. For more information about the service, contact your sales representative.
The sender domain implements DMARC
What it means
We detected a valid DMARC record for the sender domain with a monitoring policy p=none.
This configuration meets the minimum DMARC requirement currently set by major Mailbox Providers for senders who send large volumes of emails and allows collecting authentication information through DMARC reports.
However, the policy p=none does not require providers to quarantine or reject messages that fail DMARC checks. It therefore offers a lower level of protection compared to p=quarantine or p=reject.
What to do
If you want to increase the domain's protection level, you can discuss with your IT department the transition from:
-
p=none: monitoring.
to:
-
p=quarantine: messages that fail DMARC may be treated as suspicious or spam. -
p=reject: providers are requested to reject messages that fail DMARC.
Switching to a stricter policy is not mandatory and must be planned carefully.
Before making changes, ensure that all systems sending emails on behalf of the domain, not just MagNews, are properly authenticated and aligned with SPF and/or DKIM. Otherwise, legitimate messages might also fail DMARC.
For sends made through MagNews, it is important that the sender domain has DKIM certification correctly configured and active. If you haven't done so yet, see How to define the sender domain and configure DKIM.
If you do not have internal resources to analyze DMARC reports and plan the transition to a stricter policy, our IT/deliverability team can offer you a dedicated service for DMARC configuration, monitoring, and optimization.
For more information about the service and related costs, contact your sales representative.
Your domain does not authorize the platform to send messages
What it means
The sender domain has a DMARC record with a restrictive policy (quarantine or reject) but is not yet certified with DKIM. DKIM certification is necessary to ensure DMARC alignment, one of the fundamental requirements for DMARC to function. Without DKIM, your emails risk being classified as spam or not delivered.
What to do
Configure and activate DKIM certification:
- Go to Settings > Brand Protection > Sender Domains.
- Click on the relevant domain to view the TXT record to publish.
- Create the TXT record in the DNS panel of your hosting provider or registrar.
- Return to the sender domain configuration in MagNews and click Activate Certification.
For more details, see How to define the sender domain and configure DKIM.
Your domain's DMARC is not valid
What it means
The sender domain publishes an invalid DMARC record. This means the record contains one or more syntax or configuration errors and may not be interpreted correctly by mail providers.
An invalid DMARC can compromise email authentication and increase the risk that messages are classified as spam or rejected.
What to do
Ask your IT department or whoever manages the domain's DNS to verify the DMARC record's configuration and syntax.
You can also check the record using a DMARC verification tool, which can help identify any configuration errors.
For more information or if you need help interpreting the detected error, contact our Help Desk.
Most common errors
| Error | Description | Typical error examples |
|---|---|---|
| Mandatory tags missing or invalid | A DMARC record must start with v=DMARC1 and must contain the p tag, which defines the policy. Allowed values for p are none, quarantine, and reject. The v tag must be the first in the record.
|
v=dmarc1; p=noneDMARC1; p=nonev=DMARC1 without pv=DMARC1; p=blockp=none; v=DMARC1
|
| Syntax errors | DMARC tags must be written in the format tag=value and separated by ;. Incorrectly inserted spaces and separators can make the record unreadable. |
v=DMARC1, p=nonev=DMARC1 p=nonev=DMARC1;; p=none
|
| Duplicate DMARC record | Only one valid DMARC record must be found for the same domain. If multiple DMARC records are returned, the DMARC check cannot be applied correctly. |
_dmarc.example.com TXT "v=DMARC1; p=none"and simultaneously _dmarc.example.com TXT "v=DMARC1; p=reject"
|
| Tag value not allowed | Each DMARC tag accepts only certain values. For example, the p tag can only contain none, quarantine, or reject. |
p=blockp=spamp=nessunap=rifiuta
|
Invalid value of the rua tag
|
The optional rua tag indicates where to send aggregated DMARC reports. It must contain a mailto: URI, for example rua=mailto:report@example.com. If there are multiple recipients, they must be separated by commas.
|
rua=report@example.comrua=mailto:report@example,comrua=mailto:report1@example.com; mailto:report2@example.com
|
The sender domain is not configured properly
What it means
MagNews does not detect an MX record for the sender domain.
The MX record indicates which mail servers are responsible for receiving emails on behalf of the domain. Its absence may indicate that the domain used as sender is not properly set up to receive messages.
This can cause two main issues:
- Reception problems: replies sent to the sender address may not be delivered correctly. You might therefore not receive requests, responses, or communications sent by your contacts.
- Deliverability problems: some providers may consider a sender domain that is not properly configured to receive mail less reliable.
What to do
Ask your IT department or whoever manages the domain to verify the MX configuration of the sender domain.
Also verify that the email address used as sender or Reply-To corresponds to an active and monitored mailbox, so that you can receive and manage any recipient responses.