DKIM not valid or is it?

I own a server (hardware) and run my own DNS. I am using MX Route for mail only. I have updated my DNS records (BIND 9.11.3, Ubuntu 18.04 LTS).

I have NOT changed any DNS entries for my domain at MX Route because you are not serving the record and I wanted to leave it as is for now in case I need the original data.

I did of course edit the DNS record on my name server.

I used to validate the DKIM entry which I copied and pasted from your default DNS entires for my domain. I also used

So, “Mail tester dot com” shows the SPF and a 2048 bit DKIM test entry. That’s good.

But DKIMValidator shows the following for the SPF record:

        Result code: softfail
Local Explanation: Sender is not authorized by default to use '' in 'mfrom' identity, however domain is not currently prepared for false failures (mechanism '~all' matched)
spf_header = Received-SPF: softfail ( Sender is not authorized by default to use '' in 'mfrom' identity, however domain is not currently prepared for false failures (mechanism '~all' matched)); identity=mailfrom; envelope-from="";; client-ip=

You are NOT using the correct SPF record.

Please read the [Important Account Information] email.

Please also refer to this in the DKIM Tutorial:

Okay. I used the SPF record which is provided, listed just above my DKIM record. That is the record provided by MX Route.

Should I generate my own SPF record using a site like spfwizard? I assume an SPF record is still preferred even with DKIM.

Okay, I’ll ignore the rude reply there because I forgot to answer one of your points - I NEVER RECEIVED THE EMAIL ENTITLED [Important Account Information] and no, it was not in my spam folder and yes I did get the 4 emails from MXRoute confirming my account.

But thank you for a clear and concise answer.

I am sorry, but did you even read my response?

The CORRECT SPF Record is provided in the [Important Account Information] email that you received upon ordering your service.

In that email you will see this …

No! Please read the documentation and responses I have provided.

Again, the correct TXT record for SPF is:

Thank you! Any chance that message can be sent again? When I click my Name > Messages - there are no messages to show. I kept seeing references to the [Important Account Information] and assumed it was something that used to be sent, but no longer.

Get some sleep. Thanks for your help!

Fair enough … not an excuse but it IS 4:30 AM and I haven’t been able to sleep yet. :frowning:

Anyways, you can also locate that email by logging in to the portal and on the top right where your name is, you can click that drop down menu to see a link to email history.

I assume it’s safe to delete the default DNS entries that MXRoute has for my domain now that I have mail working and am hosting my own DNS? I can just as easily leave those if there is no negative affect.

Pretty awesome service! Get some sleep!

I suspect that @jarland will see this message and will resend it per your request.

Honestly, the entries in the DKIM record section do not apply anywhere, and other than the actual DKIM record itself are mostly irrelevant. As the service is built on a web hosting platform, some things simply cannot be completely removed.

So, the short answer is whichever is your preference - they do no harm being there as your name servers are not pointed to MXroute, but I can understand not wanting to see something that is not in use.

You can find a copy of it here: