Barracuda SPF and DKIM Configuration | EasyDMARC

Barracuda SPF and DKIM Configuration: Step By Step

2 Min Read
Barracuda

This instructional article will demonstrate the Barracuda configuration process of Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) Signatures to ensure Barracuda passes the DMARC alignment check, eliminate spam from your domain, and increase security.

The process of setting up the SPF Record

To ensure the emails from Barracuda are sent on behalf of your domain, you need to create or update your existing SPF record by including the following mechanisms based on your Barracuda Networks instance:

RegionValue
AU (Australia)v=spf1 include:spf.ess.au.barracudanetworks.com ~all
CA (Canada)v=spf1 include:spf.ess.ca.barracudanetworks.com ~all
DE (Germany)v=spf1 include:spf.ess.de.barracudanetworks.com ~all
IN (India)v=spf1 include:spf.ess.in.barracudanetworks.com ~all
UK (United Kingdom)v=spf1 include:spf.ess.uk.barracudanetworks.com ~all
US (United States)v=spf1 include:spf.ess.barracudanetworks.com ~all

In order to authenticate Barracuda on SPF, please follow these steps:

  1. Login and head to your DNS Zone provider.
  2. Create a new TXT record
  3. Input the DNS name as @ or your domain name.
  4. Input the DNS value as required in the table above.
  5. Save the record
  6. Wait up to 72 hours to allow your DNS to process the changes.

A screenshot below will show you an example of the SPF record. We’ll be using CloudFlare for this example.

Important Note: Each domain must have only one SPF TXT Record. If you have multiple SPF Records, SPF will return a PermError

If you are using multiple IPs, ESPs, Third-Party services for your various email strategies, you should include them in a single SPF Record.
E.g v=spf1 ip4:18.57.156.221 include:spf.ess.barracudanetworks.com include:thirdpartyservice.com ~all

Barracuda DKIM Configuration

Barracuda does not currently have DKIM signing enabled for its outgoing email stream. You must expressly set the DKIM up on the mail server you use to send emails (such as Microsoft 365, OnPremise Exchange, Google, SendGrid, and so on) if you wish to use DKIM for domain authentication.

Note: Barracuda may include a footer to your outgoing messages if you have manually configured DKIM on your mail server. This could cause unwanted DKIM failures for your emails. Therefore, in order for them to handle this matter, you might need to get in contact with their support.

Congratulations, You now successfully authenticated your outgoing mail stream from Barracuda with SPF and DKIM.

Email Security Specialist | EasyDMARC
Amin specializes in DMARC, email security, and cyberawareness, ensures robust email security by providing technical support and translating complex issues into straightforward solutions. His expertise helps clients understand and implement effective cyberawareness strategies.
Comments
guest
0 Comments
Inline Feedbacks
View all comments

succees We’re glad you joined EasyDMARC newsletter! Get ready for valuable email security knowledge every week.

succees You’re already subscribed to EasyDMARC newsletter. Continue learning more about email security with us