How to setup my DNS records

From Supporting Role Wiki
Revision as of 09:55, 1 May 2024 by Richard (talk | contribs) (→‎Email Reputation)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

For a fabit system we require a number of DNS entries for your domain name. Not every situation is the same, but this is how we normally do it:

Dedicated Email Server

  • mail.<yourdomain>. is set to the external IP address of your mail server.
  • remote.<yourdomain>. is set to be a CNAME pointing at your fabit server (eg aa000019.uk.fabit.net.).
  • www.<yourdomain>. is usually set to be a CNAME pointing at the server hosting your website, (eg web1.uk.fabit.net.)
Incomplete

Shared Email Server

For the shared email server the settigns are below

MX Records

At a minimum we need some MX (Mail eXchange) records. We usually set up four MX:

  • @ MX 10 webmail.supporting-role.net.
  • @ MX 20 mx1.uk.fabit.net.
  • @ MX 30 mx2.uk.fabit.net.
  • @ MX 40 mx3.uk.fabit.net.

Auto Configuration

For autoconfiguration to work we need the following three CNAME records:

  • mail CNAME webmail.supporting-role.net.
  • autodiscover CNAME webmail.supporting-role.net.
  • autoconfig CNAME webmail.supporting-role.net.

Email Reputation

For the best possible anti-spoofing and email reputation we need an SPF (Sender Policy Framework) record, a DKIM (Domain Key Identified Mail) record and a DMARC (Domain-based Message Authentication Reporting & Conformance) record:

  • @ TXT "v=spf1 a mx include:_spf.client.uk.fabit.net -all"
  • mail._domainkey CNAME webmail._domainkey.supporting-role.net.
  • _dmarc TXT "v=DMARC1; p=reject"

NB For more information on DNS, please read What is DNS.