# How to configure a domain that only receives email? **URL:** \ **Category:** Technical Help\ **Created:** [April 16, 2024, 5:34pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448 "2024-04-16T17:34:23Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![BSCWebmaster](https://avatars.discourse-cdn.com/v4/letter/b/bbe5ce/32.png) [@BSCWebmaster](https://forum.dmarcian.com/u/BSCWebmaster)\ **Post date:** [April 16, 2024, 5:34pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448/1 "2024-04-16T17:34:23Z")
We have a couple domains that are not used much. One is simply parked, the other receives email but never sends any. For the parked, unused domain I have configured DKIM and am using an SPF of “v=spf1 -all” For the domain that only receives email I have also configured DKIM and am using an SPF of “v=spf1 a include:\_spf.google.com ~all” Can I safely set for it a DMARC policy of Reject 100%? ---
**Author:** ![LinkP](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/linkp/32/142_2.png) [@LinkP](https://forum.dmarcian.com/u/LinkP)\ **Post date:** [April 16, 2024, 5:45pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448/2 "2024-04-16T17:45:27Z")
Why aren’t you using the same _Sends No Email_ SPF on your receive-only domain? Why publish DKIM for a domain that send no mail? You can publish a better DKIM policy record that indicates no valid DKIM. > **[Protect domains that do not send email](https://www.gov.uk/guidance/protect-domains-that-dont-send-email#create-an-empty-dkim-record)** > > Make sure that domains that do not send email cannot be used for spoofing. > [@BSCWebmaster](#): > > Can I safely set for it a DMARC policy of Reject 100%? If you send no email using that domain, why wouldn’t you? The answer is still yes, even when you send email, you just have to be more certain that you are authenticating all of your outbound email. ---
**Author:** ![BSCWebmaster](https://avatars.discourse-cdn.com/v4/letter/b/bbe5ce/32.png) [@BSCWebmaster](https://forum.dmarcian.com/u/BSCWebmaster)\ **Post date:** [April 16, 2024, 5:54pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448/3 "2024-04-16T17:54:00Z")
Email the non-sending domain receives gets forwarded (within the Google Workspace) to our active domain (it’s actually just one user). Still fine to use the “Sends No Email SPF”? ---
**Author:** ![LinkP](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/linkp/32/142_2.png) [@LinkP](https://forum.dmarcian.com/u/LinkP)\ **Post date:** [April 16, 2024, 6:11pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448/4 "2024-04-16T18:11:13Z")
That include mechanism cannot produce the aligned SPF required for DMARC, so in the context of a DMARC policy it is completely useless. ---
**Author:** ![BSCWebmaster](https://avatars.discourse-cdn.com/v4/letter/b/bbe5ce/32.png) [@BSCWebmaster](https://forum.dmarcian.com/u/BSCWebmaster)\ **Post date:** [April 16, 2024, 7:59pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448/5 "2024-04-16T19:59:47Z")
> [@LinkP](#): > > Why aren’t you using the same _Sends No Email_ SPF on your receive-only domain? > [@LinkP](#): > > That include mechanism cannot produce the aligned SPF required for DMARC, so in the context of a DMARC policy it is completely useless. Hey LinkP! Thanks so much for responding! I really appreciate you taking the time to try and help me. So, umm… what were you trying to tell me here? I’m genuinely ignorant of how to do this right, so if you could spell it out like I’m an idiot that would be terrific. ---
**Author:** ![LinkP](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/linkp/32/142_2.png) [@LinkP](https://forum.dmarcian.com/u/LinkP)\ **Post date:** [April 16, 2024, 8:54pm UTC](https://forum.dmarcian.com/t/how-to-configure-a-domain-that-only-receives-email/2448/6 "2024-04-16T20:54:56Z")
I use the settings in the Gov UK guide that I shared for all domains that do not send email. For domains that also don’t receive email I also add a null MX, which is covered in that guide. Unless it affects delivery to your server, I wouldn’t bother with the Google include.