How To Configure DMARC In Gandi

November 18, 2024  |  2 min read
DMARC record configuration for Gandi

This guide will show you how to add a Skysnag DMARC CNAME record using Gandi’s DNS management system. Once configured, Skysnag will handle your DMARC compliance, improving your email security and protecting your domain from email fraud.

Note: To successfully apply the instructions below, you must have a Skysnag account. If you haven’t created one yet, click here to do so.

Step 1: Log in to Your Gandi Account

  1. Go to the Gandi website.
  2. Log in using your account credentials.
  3. From your account dashboard, navigate to the Domains section.

Step 2: Access the DNS Management Section

  1. In the Domains section, select the domain you wish to manage.
  2. Scroll down and find the DNS Records section, where you can view, add, and modify your DNS records.

Step 3: Add the CNAME Record for DMARC

  • In the DNS Records section, click the option to Add a New Record.
  • Fill in the following details:
    • Type: Select CNAME from the dropdown list.
    • Name/Host: Enter _dmarc (this is for DMARC-specific records).
    • Value/Target: Enter {your-domain-name}.protect._d.skysnag.com. Replace {your-domain-name} with your actual domain name, for example: example.com.protect._d.skysnag.com.
    • TTL: You can leave the default value or choose Automatic for DNS propagation.
  • After entering the details, click Save to create the CNAME record.

Step 4: Wait for DNS Propagation

  1. Once the CNAME record is saved, allow time for DNS propagation. It typically takes a few minutes to a few hours, but can take up to 24 hours in some cases.

Step 5: Verify the Skysnag CNAME Record

  1. Log in to your Skysnag dashboard.
  2. Find the domain where you added the CNAME record.
  3. Click the Verify button to confirm that the Skysnag DMARC CNAME record is properly configured.
  4. Once verified, Skysnag will automatically manage your DMARC policies and email security reporting.

Troubleshooting Tips

  • CNAME Record Not Propagating? Double-check that the record details are correct. Allow up to 24 hours for DNS propagation.
  • Existing DMARC TXT Record Conflict? If you have an existing DMARC TXT record, consider removing or updating it to avoid conflicts with the Skysnag CNAME record.
  • Need Help from Gandi? Gandi offers support and a knowledge base to help you with DNS configuration issues if needed.

By following these steps, you’ve successfully added the Skysnag DMARC CNAME record to your domain in Gandi. Skysnag will now manage your DMARC policies and email security, ensuring that your domain is protected from email fraud and phishing attacks.

Check your domain's DMARC security compliance

Enforce DMARC, SPF and DKIM in days - not months

Skysnag helps busy engineers enforce DMARC, responds to any misconfigurations for SPF or DKIM which increases email deliverability, and eliminates email spoofing and identity impersonation.