# ==============================================================================
# FaultyPacket — WooCommerce & WordPress Outbound Email Deliverability DNS Pack
# Cures Gmail & Microsoft 365 `550-5.7.26` and `550 5.7.515` rejections on
# WooCommerce order confirmations, password resets, and Contact Form 7 emails.
# Replace `yourdomain.co.uk` with your store's actual domain.
# ==============================================================================

# ------------------------------------------------------------------------------
# SCENARIO A: Microsoft 365 Corporate Mail + Resend / Postmark for WooCommerce
# (Total DNS Lookups: 4/10 — Strictly under RFC 7208 10-lookup PermError ceiling)
# ------------------------------------------------------------------------------
yourdomain.co.uk.  3600  IN  TXT  "v=spf1 include:spf.protection.outlook.com include:spf.mtasv.net -all"

# ------------------------------------------------------------------------------
# SCENARIO B: Google Workspace Corporate Mail + SendGrid for WooCommerce
# (Total DNS Lookups: 5/10 — Strictly under RFC 7208 10-lookup PermError ceiling)
# ------------------------------------------------------------------------------
yourdomain.co.uk.  3600  IN  TXT  "v=spf1 include:_spf.google.com include:sendgrid.net -all"

# ------------------------------------------------------------------------------
# SCENARIO C: Dedicated Transactional Subdomain Isolation (BEST PRACTICE)
# Send WooCommerce receipts from `orders@mail.yourdomain.co.uk` via Resend/SES
# so your root domain SPF lookup budget stays untouched!
# ------------------------------------------------------------------------------
mail.yourdomain.co.uk.        3600  IN  TXT  "v=spf1 include:amazonses.com -all"
_dmarc.mail.yourdomain.co.uk. 3600  IN  TXT  "v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:dmarc-rua@yourdomain.co.uk;"

# ------------------------------------------------------------------------------
# STAGED DMARC ROLLOUT FOR ROOT DOMAIN (Zero Legitimate Order Receipt Drops)
# Week 1-2 (Discovery):   p=none
# Week 3-4 (Quarantine):  p=quarantine; pct=100
# Week 5+  (Enforced):    p=reject; sp=reject
# ------------------------------------------------------------------------------
_dmarc.yourdomain.co.uk.   3600  IN  TXT  "v=DMARC1; p=reject; sp=reject; pct=100; adkim=r; aspf=r; rua=mailto:dmarc-rua@yourdomain.co.uk; fo=1;"
_mta-sts.yourdomain.co.uk. 3600  IN  TXT  "v=STSv1; id=2026102501;"
_smtp._tls.yourdomain.co.uk. 3600 IN TXT  "v=TLSRPTv1; rua=mailto:tls-rpt@yourdomain.co.uk;"
