Skip to content

Platform
Solutions
- Managed e-mail
- Migration
Editions
Install
Overview
Settings
Support
- Overview
- Support Portal
Company

Stalwart

Platform

Mail Server
Collaboration
MTA
Anti-spam
Architecture
Integrations

Editions

Enterprise
Community
Compare
Pricing
Evaluate

Solutions

Managed e-mail
Migration

Documentation

Get started
Configuration
Management
Development
FAQ
Linux / macOS
Windows
Docker

Company

About
Blog
Contact
Legal

[email protected]

GitHub
Twitter
Mastodon
Discord
Reddit
Matrix

Stalwart Blog
Getting started
Configuration
- Overview
- Bootstrap mode
- Recovery mode
- Environment variables
- Declarative deployments
- Expressions
- Variables
Server settings
- General
- Listeners
- TLS
  - Overview
  - Certificates
  - ACME
    
    Overview
    Challenge Types
    Configuration
- Reverse Proxy
- Auto-banning
- DNS
- Autoconfig
- ASN and GeoIP
- AI Models
- Caching
- Enterprise License
Storage settings
- Overview
- Data store
- Blob store
- Search store
- In-memory store
- Backends
- Lookup lists
Access Control
- Overview
- Principals
- Authentication
- Authorization
- OAuth
- OpenID Connect
- Directories
Domains
HTTP settings
- Overview
- Settings
- JMAP
- WebDAV
  - Overview
  - Protocol
- Access Control
- Security
- Rate limiting
- Form Handling
Email settings
- Overview
- Settings
- Management
  - Mailing lists
  - Masked email
MTA settings
- Overview
- Inbound
- Outbound
- Filtering
- Rewriting
- Sender Authentication
  - DKIM
    
    Overview
    Signing
    Verifying
  - SPF
  - ARC
  - DMARC
  - Reverse IP
- Transport Security
- Reports
- Management
Collaboration settings
Encryption settings
Spam & Phishing filter
- Overview
- Settings
- Linear Classifier
- LLM classifier
- Rules
- DNS blocklists
- DMARC analysis
- Phishing protection
- Collaborative digests
- Trusted senders
- Greylisting
- Spamtrap
Sieve scripting
Clustering & HA
- Overview
- Deployment
- Configuration
- Coordination
- Orchestration
Telemetry
- Overview
- Events
- Tracing & Logging
- Metrics
- Webhooks
- Alerts
- Live Telemetry
- History
- Management
Applications
- Overview
- Updates
Management
- Overview
- Web-based Administration
- Tasks
- Actions
- Command Line Interface
- Maintenance
  - Database Console
  - Database Migration
- Troubleshooting
Development
Ref
FAQ
v0.15 (archived)
- Getting started
- Configuration
  - Overview
  - Macros
  - Values
    
    String
    Integer
    Boolean
    IP Address
    Size
    Duration
    Rate
    Array
    Cron
  - Expressions
    
    Overview
    Operators
    Functions
    Values
  - Variables
- Server settings
  - General
  - Listeners
  - TLS
    
    Overview
    Certificates
    
    ACME
    
    Overview
    Challenge Types
    Configuration
  - Reverse Proxy
    
    Overview
    Proxy Protocol
    Traefik
    Caddy
    HAProxy
    NGINX
  - Auto-banning
  - Autoconfig
  - ASN & GeoIP
  - AI Models
  - Caching
  - Enterprise License
- Storage settings
  - Overview
  - Data store
  - Blob store
  - Search store
  - In-memory store
  - Backends
    
    Overview
    RocksDB
    FoundationDB
    PostgreSQL
    MySQL / MariaDB
    SQLite
    S3-compatible
    Filesystem
    ElasticSearch
    Meilisearch
    Redis
    Azure Blob Storage
    
    Composite
    
    Overview
    Sharded In-Memory Store
    Sharded Blob Store
    SQL Read Replicas
  - Lookup lists
    
    Overview
    Local
    Remote
- Access Control
  - Overview
  - Principals
    
    Overview
    Individual
    Group
    Mailing List
    Domain
    API Key
    OAuth Client
  - Authentication
    
    Overview
    Passwords
    Two-Factor Authentication
    App Passwords
  - Authorization
    
    Overview
    Permissions
    Roles
    Administrators
    Tenants
    Quotas
  - OAuth
    
    Overview
    Authorization Flows
    Tokens
    Dynamic Registration
    Interoperability
    Endpoints
  - OpenID Connect
    
    Overview
    ID Tokens
    OIDC Provider
    Endpoints
  - Directories
    
    Overview
    Internal
    SQL Database
    LDAP Server
    OpenID Connect
    In-memory
    SMTP and IMAP
- HTTP settings
  - Overview
  - Settings
  - JMAP
    
    Overview
    Protocol
    WebSockets
    Push notifications
  - WebDAV
    
    Overview
    Protocol
  - Access Control
  - Security
  - Rate limiting
  - Form Handling
- Email settings
- MTA settings
  - Overview
  - Inbound
    
    Overview
    Connect stage
    EHLO stage
    MAIL stage
    RCPT stage
    DATA stage
    AUTH stage
  - Outbound
    
    Overview
    Strategies
    Queues
    Scheduling
    Routing
    Connection
    TLS
    DNS
    Rate Limits
    Quotas
  - Filtering
    
    Overview
    Spam filter
    Sieve scripting
    Milter filters
    MTA Hooks
  - Rewriting
    
    Overview
    Envelope
    Headers
    Body & Attachments
  - Sender Authentication
    
    DKIM
    
    Overview
    Signing
    Verifying
    
    SPF
    ARC
    DMARC
    Reverse IP
  - Transport Security
    
    Overview
    DANE
    MTA-STS
  - Reports
    
    Overview
    Delivery Notifications
    DKIM
    SPF
    DMARC
    TLS
    Analysis
- Collaboration settings
- Encryption settings
- Spam & Phishing filter
  - Overview
  - Settings
    
    Overview
    Scores
    MIME Types
    Domain Lists
  - Linear Classifier
    
    Overview
    Training
    Hyperparameters
    Learning
  - LLM Classifier
  - Rules
  - DNS Blocklists
  - DMARC Analysis
  - Phishing Protection
  - Collaborative Digests
  - Trusted Senders
  - Greylisting
  - Spamtrap
- Sieve scripting
- Clustering & HA
  - Overview
  - Deployment
    
    Overview
    Sizing
    Storage
    Topology
  - Configuration
    
    Overview
    Node ID
    Coordination Mechanism
    Load Balancing
    Roles
  - Coordination
    
    Overview
    Peer-to-Peer
    Apache Kafka / Redpanda
    NATS
    Redis
  - Orchestration
    
    Overview
    Kubernetes
    Docker Swarm
    Apache Mesos
- Telemetry
  - Overview
  - Events
  - Tracing & Logging
    
    Overview
    OpenTelemetry
    Log file
    Console
    Journal
  - Metrics
    
    Overview
    OpenTelemetry
    Prometheus
  - Webhooks
  - Alerts
  - Live Telemetry
  - History
- Management
  - Overview
  - Web-based Administration
    
    Overview
    Updates
    Self-service
    Branding
  - Command-line Interface
    
    Overview
    
    Queue
    
    Messages
    Reports
    
    Import
    
    From Maildir or mbox
    From JMAP
    
    Export
    
    Database
    
    Backup
    Migrate
    Maintenance
    
    Configuration
  - Database Console
  - Database Migration
  - Troubleshooting
- API Reference
  - Management API
    
    Overview
    Endpoints
  - Webhooks
  - MTA Hooks
    
    Overview
    Request
    Response
- Development
- FAQ

GitHub RSS

Stalwart Blog

Select theme

On this page

Overview

Sender Authentication

Arc

Dkim

Dmarc

Iprev

Spf

Edit page

Last updated: May 7, 2026