Adding DKIM and SPF records to Gandi

To add TXT records for SPF and DKIM to your Gandi hosted domain, follow these steps.
Obtain the SPF and DKIM records from Postmark
Log into Postmark and navigate to the Sender Signatures section. Click Authentication for the domain you are adding DKIM and SPF records for.
You will then see entries for both DKIM and SPF:
These records will be used once you login to Gandi, so keep the Authentication window or tab open in your browser.

Adding the SPF and DKIM Records to Gandi

  1. Log in to Gandi and go to the domain’s management page.
  2. Click Edit the zone
  3. Gandi does not let you edit active zone configurations, so click Create a new version
  4. In normal mode your zone file will be shown with each resource record on its own line, like this:
  5. Click Add to add a new record. We will start with adding the SPF record.
  6. You will be presented with a form:
  7. For the Type, select TXT from the drop-down. You can generally leave the TTL as it is.
  8. In the Name field, enter @
  9. In the Value field, enter v=spf1 a mx ~all
  10. When you're done, be sure to click Submit. You will see this message:
  11. Click Add again to add another record for DKIM. For the Type, select TXT from the drop-down.
  12. In the Name field, enter the Host value you see for DKIM in your domain’s Authentication page in Postmark. It will be in the format of timestamppm._domainkey
  13. In the Value field, enter the TXT value for the DKIM record from your Authentication page in Postmark.
  14. When you're done with adding the DKIM record, be sure to click Submit again.
  15. Once you are done adding both records, click Use this version to begin using the new zone file version:
  16. You will be prompted to confirm:
    And should then receive confirmation:
  17. To finish verifying SPF, click on the Verify button in the Postmark Authentication page next to the SPF record.
For DKIM, Postmark will check your DNS records every five minutes to see if it is valid. Once it is identified, the DKIM record will be verified automatically.
If everything is propagated and working, you will see a green checkmark in your Sender Signatures page showing that the domain has been verified. You can now also send from any email address on that domain.
Last updated August 1st, 2017

Still need some help?

Our customer success team is here to help!