In 2022, Emarsys has introduced simpler and more secure DNS settings. These settings are visible as recommended ones for your current, or new domains in the Domain Validation Service page.
In case you have domain validation errors, they do not necessarily mean issues with your authentication, but more likely that your domain has older, or custom DNS records setup. Your domain can still be authenticated, as the legacy DNS records still work fine. In that case, check the specific warnings for your domains and any action points in the Domain Validation tool. See, Domain Validation Service errors.
Why should I update the DNS records?
Reasons to consider updating your DNS records to our recommended ones:
- The DNS settings have improved DKIM security: periodic DKIM key rotation and 2048bit DKIM key length.
- The SPF record has only one DNS lookup instead of two and offers flexibility on sending IPs allocation.
- The Domain Validation tool is supporting mainly the Emarsys recommended DNS settings.
- It offers customized Bounces (Mail-From/ReturnPath) domain. In case you use our legacy shared Bounces domain, the new Google and Yahoo requirements for 2024 take into consideration spam complaints on the Bounces (Mail-From/ReturnPath) domain which in that case is shared between hundreds of senders.
How to update DNS records to the current standard and avoid downtime?
Due to DNS caching and to accelerate the propagation of your updated DNS records it is recommended temporarily reducing the Time-to-Live (TTL) value before you change any of your DNS settings. Ensure that you restore your initial TTL after your changes are live. You can check the DNS propagation status at the following link: DNS Checker
To avoid downtime, complete these steps to update your DNS records:
- Check the DNS records to be present on your domain for the current, default SAP Emarsys DNS setup. See, SAP Emarsys DNS settings.
Alternatively, to add a new domain, you can start by adding it to the Domain Validation tool. See, Adding and validating a new domain. - You can complete these changes on your end without Emarsys support:
- Create a CNAME record for your new Bounces (Mail-From/ReturnPath) domain, for example:
bounces.sending.domain.com. 800 IN CNAME bounces.emarsys.net - Change the Emarsys SPF record to the recommended one.
- Add the recommended CNAMEs and DKIM records on your sending domain.
Note: Do not delete the previous Emarsys DKIM record! - Review and update your DMARC record to the recommended one, if needed.
- Create a CNAME record for your new Bounces (Mail-From/ReturnPath) domain, for example:
- Submit a support ticket on the Help Portal to inform Emarsys Technical Support on the DNS settings changes. See, Help and Support at Emarsys.
- Emarsys Technical Support will check your new records and make any appropriate changes.
- Once the DNS record changes are confirmed by Emarsys Technical Support
- Change the MX record on your sending domain to
mx.eemms.net, if applicable. - Delete the older Emarsys-related DKIM records.
- Change the MX record on your sending domain to
Once this process is completed, you can run the domain validation on Domain Validation tool in your account and confirm that your new settings are correctly configured.
Domain Validation tool does not change any settings in your account or in your domains. You can only validate your domains' DNS settings against our recommended ones. To make any changes, follow the instructions provided in this page.