This instructional article will demonstrate the Barracuda configuration process of Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) Signatures to ensure Barracuda passes the DMARC alignment check, eliminate spam from your domain, and increase security.
The process of setting up the SPF Record
To ensure the emails from Barracuda are sent on behalf of your domain, you need to create or update your existing SPF record by including the following mechanisms based on your Barracuda Networks instance:
| Region | Value |
| AU (Australia) | v=spf1 include:spf.ess.au.barracudanetworks.com ~all |
| CA (Canada) | v=spf1 include:spf.ess.ca.barracudanetworks.com ~all |
| DE (Germany) | v=spf1 include:spf.ess.de.barracudanetworks.com ~all |
| IN (India) | v=spf1 include:spf.ess.in.barracudanetworks.com ~all |
| UK (United Kingdom) | v=spf1 include:spf.ess.uk.barracudanetworks.com ~all |
| US (United States) | v=spf1 include:spf.ess.barracudanetworks.com ~all |
In order to authenticate Barracuda on SPF, please follow these steps:
- Login and head to your DNS Zone provider.
- Create a new TXT record
- Input the DNS name as @ or your domain name.
- Input the DNS value as required in the table above.
- Save the record
- Wait up to 72 hours to allow your DNS to process the changes.
A screenshot below will show you an example of the SPF record. We’ll be using CloudFlare for this example.
Important Note: Each domain must have only one SPF TXT Record. If you have multiple SPF Records, SPF will return a PermError.
If you are using multiple IPs, ESPs, Third-Party services for your various email strategies, you should include them in a single SPF Record.
E.g v=spf1 ip4:18.57.156.221 include:spf.ess.barracudanetworks.com include:thirdpartyservice.com ~all
Barracuda DKIM Configuration
Barracuda does not currently have DKIM signing enabled for its outgoing email stream. You must expressly set the DKIM up on the mail server you use to send emails (such as Microsoft 365, OnPremise Exchange, Google, SendGrid, and so on) if you wish to use DKIM for domain authentication.
Note: Barracuda may include a footer to your outgoing messages if you have manually configured DKIM on your mail server. This could cause unwanted DKIM failures for your emails. Therefore, in order for them to handle this matter, you might need to get in contact with their support.
Congratulations, You now successfully authenticated your outgoing mail stream from Barracuda with SPF and DKIM.
The post Barracuda SPF and DKIM Configuration: Step By Step appeared first on EasyDMARC.
*** This is a Security Bloggers Network syndicated blog from EasyDMARC authored by Amin Mousavi. Read the original post at: https://easydmarc.com/blog/barracuda-spf-and-dkim-configuration-step-by-step/