You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/dns-configuration.md
+39-35Lines changed: 39 additions & 35 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,11 +16,11 @@ The mailserver requires several DNS record types to operate correctly:
16
16
17
17
The Mail Exchange (MX) record directs incoming emails to your mailserver. This is the primary DNS record that tells other mail servers where to deliver emails for your domain.
18
18
19
-
### Configuration
19
+
### MX Record Configuration
20
20
21
21
Create an MX record in your domain's DNS zone:
22
22
23
-
```
23
+
```text
24
24
Type: MX
25
25
Name: @ (or your domain name)
26
26
Priority: 10
@@ -29,15 +29,15 @@ Value: mail.example.com
29
29
30
30
Replace `mail.example.com` with the value configured in the `MAILNAME` environment variable. The priority value (10 in this example) determines the order when multiple MX records exist. Lower numbers have higher priority.
31
31
32
-
### Example
32
+
### MX Record Example
33
33
34
34
For domain `example.com` with mailserver hostname `mail.example.com`:
35
35
36
-
```
36
+
```text
37
37
example.com. IN MX 10 mail.example.com.
38
38
```
39
39
40
-
### Verification
40
+
### MX Record Verification
41
41
42
42
Verify the MX record using DNS lookup tools:
43
43
@@ -51,11 +51,11 @@ nslookup -type=MX example.com
51
51
52
52
A and AAAA records resolve the mailserver hostname to IPv4 and IPv6 addresses respectively. These records are required for the MX record to function, as the MX record points to a hostname that must resolve to an IP address.
53
53
54
-
### Configuration
54
+
### A/AAAA Record Configuration
55
55
56
56
Create A and AAAA records for your mailserver hostname:
57
57
58
-
```
58
+
```text
59
59
Type: A
60
60
Name: mail (or your mailserver hostname without domain)
61
61
Value: 192.0.2.1
@@ -67,16 +67,16 @@ Value: 2001:db8::1
67
67
68
68
Replace the IP addresses with your mailserver's actual IPv4 and IPv6 addresses. If your mailserver only has IPv4, you can omit the AAAA record, though IPv6 is recommended for modern email infrastructure.
69
69
70
-
### Example
70
+
### A/AAAA Record Example
71
71
72
72
For mailserver hostname `mail.example.com`:
73
73
74
-
```
74
+
```text
75
75
mail.example.com. IN A 192.0.2.1
76
76
mail.example.com. IN AAAA 2001:db8::1
77
77
```
78
78
79
-
### Verification
79
+
### A/AAAA Record Verification
80
80
81
81
Verify the A and AAAA records:
82
82
@@ -91,11 +91,11 @@ nslookup mail.example.com
91
91
92
92
The Sender Policy Framework (SPF) record authorizes your mailserver to send emails on behalf of your domain. SPF helps prevent email spoofing by specifying which mail servers are allowed to send emails for your domain.
93
93
94
-
### Configuration
94
+
### SPF Record Configuration
95
95
96
96
Create a TXT record with SPF policy:
97
97
98
-
```
98
+
```text
99
99
Type: TXT
100
100
Name: @ (or your domain name)
101
101
Value: v=spf1 mx a ip4:192.0.2.1 ip6:2001:db8::1 ~all
@@ -113,15 +113,15 @@ Common SPF mechanisms used in mailserver configurations:
113
113
-`~all`: Soft fail for all other sources (recommended during testing)
114
114
-`-all`: Hard fail for all other sources (recommended for production)
115
115
116
-
### Example
116
+
### SPF Record Example
117
117
118
118
For domain `example.com` with mailserver at `mail.example.com`:
119
119
120
-
```
120
+
```text
121
121
example.com. IN TXT "v=spf1 mx a ip4:192.0.2.1 ~all"
122
122
```
123
123
124
-
### Verification
124
+
### SPF Record Verification
125
125
126
126
Verify the SPF record:
127
127
@@ -136,7 +136,7 @@ SPF records must be published as TXT records. Some DNS providers may also suppor
136
136
137
137
DomainKeys Identified Mail (DKIM) records publish the public key used to verify email signatures. DKIM signing is configured through the management interface, which generates the DNS TXT record that must be published.
138
138
139
-
### Configuration
139
+
### DKIM Record Configuration
140
140
141
141
DKIM records are generated through the management interface:
142
142
@@ -151,41 +151,41 @@ DKIM records are generated through the management interface:
The record name includes a selector (typically `default`) and the `_domainkey` subdomain. The value contains the DKIM version, key type, and public key.
161
161
162
-
### Example
162
+
### DKIM Record Example
163
163
164
164
For domain `example.com` with selector `default`:
165
165
166
-
```
166
+
```text
167
167
default._domainkey.example.com. IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC..."
168
168
```
169
169
170
-
### Verification
170
+
### DKIM Record Verification
171
171
172
172
After publishing the DKIM record, verify it through the management interface. The interface checks DNS propagation and validates the record format. You can also verify manually:
173
173
174
174
```bash
175
175
dig TXT default._domainkey.example.com
176
176
```
177
177
178
-
See [DKIM Signing](DKIM_SIGNING.md) for detailed DKIM configuration instructions.
178
+
See [DKIM Signing](dkim-signing.md) for detailed DKIM configuration instructions.
179
179
180
180
## DMARC Record
181
181
182
182
Domain-based Message Authentication, Reporting & Conformance (DMARC) records define email authentication policy and enable reporting. DMARC works in conjunction with SPF and DKIM to provide comprehensive email authentication.
0 commit comments