Email authentication with DMARC, SPF, and DKIM

Domain-based Message Authentication, Reporting & Conformance (DMARC) performs email authentication with Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) checking.

SPF compares the client IP address to the IP address of the authorized senders in the DNS record. If the test fails, the email is treated as spam.

DKIM allows FortiMail to check for DKIM signatures for incoming email or sign outgoing email with the domain keys for the protected domains.

This recipe covers how to enable DMARC, SPF, and DKIM.

For more information about these email authentication protocols, see the FortiMail Administrator Guide.