ModeesFree DNS check
Is the domain ready to send?
Read SPF, DKIM and DMARC from public DNS before a campaign is promised. The record check is free and needs no email. Every result gets a link you can send to a client; a fuller, annotated report can be emailed after you confirm the address.
What the three records do
A receiving server asks three separate questions before it decides where a message lands. The check above reads the public DNS answers to all three, so you can see which one is missing before a campaign is promised.
It is a single TXT record naming the hosts that may use your domain in the envelope sender. It is evaluated with a hard limit of ten DNS lookups, and a record that grows past that limit starts returning permerror without anyone editing it. A passing SPF is a floor, not a guarantee: it says a server was allowed, not that the message deserved to arrive.
The signature lives in a TXT record at <selector>._domainkey.yourdomain, which is why the selector matters: without the right one the record cannot be found, and a signature nobody can verify is treated as no signature at all. This is the record most often published under a name that does not match what the sending platform signs with.
A p=none record only asks for reports; it instructs the receiver to deliver the mail anyway. Moving to p=quarantine or p=reject is what actually stops a spoofed message, and it is a change worth making only after the reports show every legitimate sender passing.
How to read the result
Each record comes back as one of four states, and the difference between them decides whether the next step is a DNS edit or a second look.
- Pass
The record exists and is well formed. Nothing to change here; move to the next record, then to alignment.
- Missing
No record was returned. This is the one state that is unambiguously a fault, and it is the most common cause of a domain that has never sent successfully.
- Error
The resolver did not answer, or answered with something malformed. A timeout is not a missing record, so re-run the check before you edit anything.
- Warning
The record is present but something about it is fragile: a chain close to the ten-lookup limit, a policy that asks for reports but does not enforce, a signature that will not survive a forward.