Hosted DNS

Hosted DNS lets SpoofWard manage your email authentication DNS records (DMARC, SPF, MTA-STS, TLS-RPT) on your behalf. Instead of manually editing records at your DNS provider, you delegate specific records to SpoofWard via CNAME and manage them from the dashboard.

How It Works

1. Enable Hosted DNS for a record type (e.g., DMARC)
2. SpoofWard generates a unique CNAME target for your domain
3. At your DNS provider, create a CNAME record pointing to SpoofWard's target
4. SpoofWard verifies the delegation is in place
5. From now on, manage the record directly in SpoofWard's dashboard

Supported Record Types

• DMARC — _dmarc.yourdomain.com CNAME to SpoofWard
• SPF — Managed SPF includes via SpoofWard
• MTA-STS — Hosted MTA-STS policy
• TLS-RPT — Hosted TLS reporting

Benefits

• No DNS access needed — After initial CNAME setup, all changes happen in SpoofWard
• Instant updates — Policy changes take effect immediately without DNS propagation delays
• Policy Assistant integration — The Policy Assistant can update your DMARC policy automatically through hosted DNS
• Safer enforcement — Roll back policy changes with one click if issues arise

Setting Up Delegation

1. Go to Workspace → Hosted DNS
2. Click Enable next to the record type you want to delegate
3. Copy the CNAME target shown
4. At your DNS provider, create the CNAME record as instructed
5. Return to SpoofWard and click Verify

Example: DMARC Delegation

At your DNS provider, create:

_dmarc.yourdomain.com  CNAME  abc123.hosted.spoofward.app

Once verified, SpoofWard will serve your DMARC record from the hosted zone. You can then update the DMARC policy, rua/ruf addresses, and alignment settings directly in SpoofWard.