This blog will show your how to use Dig / NSLookup to check for SPF / DKIM / DMARC and MX Records.

DKIM Checking

DKIM lookups can be performed using these formats:

nslookup selector._domainkey.domain txt

dig selector._domainkey.domain txt

Example

dig google._domainkey.clusterednetworks.com

Output

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxZS1MNF11bV/qCcmH0KyGHjci9GtW5gZAfmxncym+TyWhddc2hRgdYFmkRLCwhqfHxmd0jD79G2ipPcFiHWNuumPGouScHn5G4BonXAv2JiJZ2ieggQHE4d4CeTh5GLu7KDVkSz8m6+OLoWpMsaLLi5NScLPgA+aqrd9r1Hz06T65pvE9auBYC65IyIs24DA" "Xie/YofFiw7jkvFFMXfZGUWJYRDWlpOWQ36h7ekPb1Ez+aKWGPnm1wK5aSPu5l5tF3kbN8xBB9vvVt5WpPcUGE/gan1uQ+Uvn5789BotgZcd6wBsjQdEFEpTtJNM2ubrf48aI9gbbEJMqoobqWhSwIDAQAB"

SPF Checking

SPF lookups can be performed using these formats:

nslookup domain txt

dig txt domain

dig txt clusterednetworks.com

Output

"v=spf1 mx include:_spf.google.com include:spf.mailjet.com ~all"

DMARC Checking

DMARC lookups can be performed using these formats:

nslookup _dmarc.domain txt

dig _dmarc.domain txt

Example

dig txt _dmarc.clusterednetworks.com

Output

"v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; aspf=r;"

MX Check

dig mx domain.com

Example

dig mx clusterednetworks.com

Output

;; ANSWER SECTION:
clusterednetworks.com.  300 IN  MX  10 alt4.aspmx.l.google.com.
clusterednetworks.com.  300 IN  MX  5 alt2.aspmx.l.google.com.
clusterednetworks.com.  300 IN  MX  1 aspmx.l.google.com.
clusterednetworks.com.  300 IN  MX  5 alt1.aspmx.l.google.com.
clusterednetworks.com.  300 IN  MX  10 alt3.aspmx.l.google.com.

Clustered Networks

Located in Edmonton, AB Canada, Clustered Networks was Incorporated in 2001 and has offered Network / Internet and IT Consulting services for over 20 years. We offer personalized service! Call Us Today! - Click Here for our Contact Info

#dig #nslookup #dmarc