How to set SPF, DKIM, and DMARC from Nepal

Brand mail is DNS, not a theme footer.

Written from experience Kathmandu 2026-09-17

Why Nepal brands still land in spam

They send from Gmail while the site says a domain.

A Kathmandu company site in Outfit with a contact form that emails from a free Gmail is a trust leak. Recipients, and Google, can see the mismatch. SPF, DKIM, and DMARC are how the domain takes responsibility for the mail. What a mail server is is the plain-language version.

At EntegrasSources I watched 60+ domains fail this in the same way: MX pointed, SPF copied wrong, DKIM never published, DMARC none. Forms then 'worked' in staging and vanished in the wild.

I do not sell email as a mood. I publish records, send a test, read the headers. That is operations next to SEO, because a domain that cannot mail often cannot be trusted to rank either.

The order that actually works

MX, then SPF, then DKIM, then DMARC.

Set MX to the provider you actually send with. SPF must list that provider and only that provider. DKIM is a TXT the provider gives you. DMARC starts on none, then quarantine, then reject when the reports are clean.

Cloudflare is often the DNS UI. Orange cloud is not MX. DNS only for mail. What Cloudflare is saves a weekend of orange-cloud folklore.

Then send from the domain, not from a personal Gmail with a display name. Display names are costumes.

Forms and transactional mail

The contact form is a mail server in disguise.

If the site posts to an API that then sends mail, that sender needs the same records. A serverless function with a random From: will die. Align envelope, header, and domain.

OpenListener mail is domain mail. Founder inquiries go to [email protected]. That is also the public address on this site. One identity.

Students practising learn in Nepal should send one real message from their domain before they add a framework. If mail fails, the product is not live yet.

What I still check every quarter

Records drift. Providers rename include: chains.

SPF strings rot when a vendor changes includes. I re-read headers after any DNS change. DMARC reports tell you who is sending as you, including the people who should not.

This sits with the person who can edit DNS and the origin. A retainer that only writes blogs cannot fix a missing DKIM selector. 60 domains at EntegrasSources is the longer scar tissue.

Bring the domain and a sample header if you want this done. Not a screenshot of cPanel.

How to set SPF, DKIM, and DMARC from Nepal?

Can I skip DMARC if SPF is set?

You can. You should not. DMARC tells receivers what to do when alignment fails, and it shows you shadow senders.

Does Cloudflare orange cloud break email?

It can, if you orange-cloud the mail hostname. Keep MX and related records DNS only.

Is Google Workspace enough for a Nepal brand?

It is enough if the records are correct. The logo in admin is not the record.

Start a project with the person who wrote this