Set up SPF alignment for Postmark
The exact steps in the Postmark admin console, followed by a checker to confirm the record resolves once you publish it.
Steps
- Postmark signs with DKIM aligned to your domain out of the box, so DMARC passes on the DKIM path without extra SPF work.
- For SPF to also align, set a custom Return-Path: add the CNAME Postmark gives you (typically pm-bounces.yourdomain.com) under the domain's Return-Path setting.
- This points the bounce/envelope domain at Postmark under your own subdomain, so SPF authenticates against your domain rather than Postmark's shared one.
Confirm it workedSPF checker
DNS changes take time to propagate. Check the record once you have published it.