If you don't have these three records set up correctly, your emails will fail verification and land in the Spam folder. Here is the exact syntax you need.

1. SPF (Sender Policy Framework)

SPF tells the world which IPs are allowed to send email on behalf of your domain.

DNS Record Type: TXT Host: @ v=spf1 ip4:YOUR_SERVER_IP -all

2. DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to your emails. This is usually generated by your PowerMTA server or MailWizz.

DNS Record Type: TXT Host: dkim._domainkey v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQE... (Your Public Key)

3. DMARC (Domain-based Message Authentication)

DMARC tells ISP providers what to do if an email fails SPF or DKIM checks.

DNS Record Type: TXT Host: _dmarc v=DMARC1; p=none; rua=mailto:admin@yourdomain.com