Add DNS page: - sample zone file with proper config (include `sp=reject` in dmarc) Mention what *not* to do / watch out with: - `* CNAME` to domain with MX and/or not a `v=spf1 -all` record. - have SPF for every record