Gmail rejecting your business email? An SPF, DKIM and DMARC checklist
Check the service that actually sent the rejected message, then check its SPF, DKIM and DMARC alignment. A DNS record alone does not show that every sending service is correctly configured.
Apply for a free check →
Published · iGears Canada
Start with the actual sender
SPF lists allowed senders; an unlisted sender fails the authorization check. DKIM is signed per sending service. List your organization’s email service, website and any transactional services, then compare each with the published records.
Check alignment, not just presence
DMARC needs SPF or DKIM to pass and align with the From domain. A record with p=none does not stop filtering. Review the rejected message’s authentication results against the domain shown to the recipient.
Gmail and Yahoo sender requirements
Both require SPF or DKIM for all senders. Bulk senders need SPF, DKIM and DMARC, plus one-click unsubscribe for marketing or subscribed mail. These are authentication and unsubscribe requirements, not a promise of inbox placement. See the Gmail sender guidelines and Yahoo sender requirements.
Website mail and Canadian commercial email
Direct web-server mail is usually outside SPF and unsigned. Use your organization’s email service or a transactional service with DKIM, a fixed From address on your domain and the visitor in Reply-To. Do not add a shared web server to SPF.
Commercial email to Canadians must also meet CASL requirements for consent, identification and unsubscribe. This is general information, not legal advice; consult the CRTC’s CASL guidance.
Frequently asked questions
Does SPF cover every service automatically?
No. SPF lists allowed senders. Compare it with every service that actually sends for your domain.
Is one DKIM setup enough?
DKIM is signed per sending service; check each service separately.
What does DMARC alignment mean?
SPF or DKIM must pass and align with the From domain for DMARC to pass.
Does p=none prevent spam filtering?
No. p=none does not stop filtering or promise inbox placement.
Do bulk senders need unsubscribe support?
Yes. Gmail and Yahoo require one-click unsubscribe for bulk marketing or subscribed mail, alongside SPF, DKIM and DMARC.
Get a view across your platforms
Free IT platform check
Verified Canadian businesses and non-profits can apply for a read-only check of one domain, DNS, email and platforms.
Apply for a free IT check