Request a Call
Online Chat
Knowledgebase: Zulu eDM Support


Posted by Wes Zulu, Last modified by Olivia Tang on 12 July 2022 07:00 PM

Setting up DNS for DMARC and using your own brand. We recommend that the Return Path = So you will need an MX DNS entry:

1. Set-up a new MX record MX 10

2.) Then you will need an SPF Record: TXT "v=spf1 ~all"

*Note if you have an existing SPF record simply add in ip4:

3.) Then we need to issue you with a custom edm DKIM / domain 

DomainKeys Identified Mail (DKIM) provides validation for mail sent "from" a specific domain. Mail sent from our system is signed with a unique signature when being sent and when it’s received, the receiving mail server checks your DNS (Domain Name Server) and confirms the private signature with the key that you have placed on your DNS. The association acts like a digital signature which can be validated by recipients.

Your DKIM key must be generated by Zulu eDM.

To have your own DKIM key created for your account please send a request to with your account details and "Sender" domain name (e.g. if sending from the domain name would be "").

**Please note that you will need access to add records to your DNS to be able to do this. If you are unsure if you have access contact your IT department or the company in which that manages the domain name you wish to modify.

Once requested we will send through a DKIM key that will look similar to the following:

Hostname = (note we have updated clients to use edm._domainkey not key1.)
Type = Text (TXT)
Entry = "k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDxJMrk8skdfhuo1xMfm9v9GtLcRHriMIU+LPbNM7M5RZSfgteOI8L86n5Z/wMH5CzNBfqhZtC7+a+W4YQE+wr1ATKp7eNDV0qhdYX

This needs to be added to your DNS as per the image below. Once complete your DNS settings should look like the following (please click the image to enlarge)


If you would like us to confirm if your DKIM is working correctly - please email us at with the domain name you have set up with the DKIM and we will check this for you. It can take 48 hours to update on your DNS so please take note of this when sending a request through.

4.) We recommend a Google Postmaster DNS entry. We will issue you this record.

5.) Finally (and when we tell you to) implement your DMARC entry: TXT "v=DMARC1\; p=none\;\; adkim=r\; aspf=r\;"

A finished DNS would look like this:


Some registrar's do not allow certain elements in the host part of the TXT record which can cause some issues (e.g. underscores and character limits). This issue is on the registrars side and we suggest that you set up a secondary custom domain for your email sending using a DNS provider that allows what your current registrar does not. Or you can switch DNS providers completely or contact them to see if they have a possible solution for you.

Some registrars automatically add quotation marks around the key which can cause errors as there is duplicate quotation marks in the saved file. All you need to do is update the file and remove the quotation marks from the key above and save the key again. This should resolve the issue.

SPF Notes:

Each domain entry i.e. or must only have one SPF record per domain. 

We have seen:
"v=spf1 a mx ip4: ip4: ip4: -all"
What you should have:
"v=spf1 ip4: ip4: ip4: -all"


The TXT Record should read (and it does on the cPanel): 


However it is adding an extra \ in and causing issues.
See here:

It comes up as:


The \ is actually there to uncomment the preceding ; character. Which gets added automatically in cPanel so no need to add your own (that's why its doubling up).

We've removed the \ symbol and it now shows correctly in lookups (with a single \). Please allow up to 4 hours for the DNS to propagate.


If you have any further questions or inquiries please let me know.

In every lookup I perform it shows up without the \


(0 vote(s))
Not helpful

Comments (0)

Copyright Zulu Labs Global Pty Ltd, 297 Dorcas Street South Melbourne VIC, Australia 3205. Ph +61 3 9001 1590