Skip to main content
bimi PROTOCOLHost: BIND / Named RFC Zone FileStandard: RFC 9495

How to Configure Brand Indicators for Message Identification (BIMI) on BIND / Named RFC Zone File

Displays authenticated brand logos next to incoming messages in supporting inboxes (Apple Mail, Gmail) after strict DMARC enforcement. Follow this verified implementation guide to deploy standard compliant BIMI DNS records in BIND / Named RFC Zone File.

Default BIMI Record Syntax

// Authoritative RFC Example
v=BIMI1; l=https://www.yourcompany.com/logo.svg; a=https://www.yourcompany.com/cert.pem

Configuration Steps in BIND / Named RFC Zone File

  1. 1Open the authoritative BIND zone file on your nameserver (/etc/bind/zones/db.domain).
  2. 2Locate the orphaned CNAME or NS entry.
  3. 3Comment out or delete the entire resource record line.
  4. 4Increment the SOA serial number (YYYYMMDDNN format).
  5. 5Execute `named-checkzone` to validate syntax and reload with `rndc reload`.

Verification Checklist (RFC 9495)

Verify DMARC enforcement on the root domain (p=quarantine pct=100 or p=reject).
Publish BIMI TXT record at default._bimi.yourcompany.com.
Ensure logo URL points to an SVG Tiny P/S compliant vector graphic.
Attach a Verified Mark Certificate (VMC) from DigiCert or Entrust for full mailbox provider display.
Live Validation Engine

Validate Your BIND / Named RFC Zone File BIMI Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator