How to properly set SPF and DMARC records?

Question

Mail server

Hello. For a domain in Yandex DNS, there are the following SPF and DMARC settings:

SPF:
v=spf1 redirect=_spf.yandex.net

DMARC:
v=DMARC1; p=none; aspf=r; sp=none

But when checking mail, the service issues:

SPF: Error; DMARC: Not found

Perhaps something else needs to be configured somewhere? Need to make some settings on the hosting?

Answer 1

Good afternoon!
You may have several DNS zones where you can edit records. In your case - at the registrar, on hosting, on Yandex. Only one of them is working. No matter how many changes you make to the rest, nothing will change. You can see which of them is working, and check which records are there, for example, here www.kloth.net/services/nslookup.php or through the button execute a request like nslookup -type=ns habr.com where ns is the record type and habr. com domain

According to the records themselves:
SPF - if sending letters will be only from Yandex, everything is correct. If the sending will come from other servers - from the site, from CRM, from mailing services - it will need to be changed.
DMARC - for new mails I usually put something like v=DMARC1; p=none; sp=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1 after some time changing to v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:[email protected]; pct=1; ruf=mailto:[email protected]; fo=1 and then raising ptr to 100 in two or three steps
Be sure to add DKIM. On Yandex, it often connects up to a week, all this time you will receive errors on DKIM on the [email protected] mail (or which one you choose for complaints and errors, but I recommend a separate one)