How to setup my DNS records: Difference between revisions

From Supporting Role Wiki
Jump to navigationJump to search
(Created page with "For a fabit system we require a number of DNS entries for your domain name. Not every situation is the same, but this is how we normally do it: * mail.<yourdomain>. is set to...")
 
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
For a fabit system we require a number of DNS entries for your domain name. Not every situation is the same, but this is how we normally do it:
For a fabit system we require a number of DNS entries for your domain name. Not every situation is the same, but this is how we normally do it:

==Dedicated Email Server==


* mail.<yourdomain>. is set to the external IP address of your mail server.
* mail.<yourdomain>. is set to the external IP address of your mail server.
Line 5: Line 7:
* www.<yourdomain>. is usually set to be a CNAME pointing at the server hosting your website, (eg web1.uk.fabit.net.)
* www.<yourdomain>. is usually set to be a CNAME pointing at the server hosting your website, (eg web1.uk.fabit.net.)


:Incomplete
We usually set up three MX ('''M'''ail e'''X'''change) records:


==Shared Email Server==
* MX 10 mail.<yourdomain>
For the shared email server the settigns are below
* MX 20 mx1.uk.fabit.net.
===MX Records===
* MX 30 mx2.uk.fabit.net.
At a minimum we need some MX ('''M'''ail e'''X'''change) records. We usually set up four MX:


* @ MX 10 webmail.supporting-role.net.
* @ MX 20 mx1.uk.fabit.net.
* @ MX 30 mx2.uk.fabit.net.
* @ MX 40 mx3.uk.fabit.net.


===Auto Configuration===
For autoconfiguration to work we need the following three CNAME records:
* mail CNAME webmail.supporting-role.net.
* autodiscover CNAME webmail.supporting-role.net.
* autoconfig CNAME webmail.supporting-role.net.

===Email Reputation===
For the best possible anti-spoofing and email reputation we need an SPF (Sender Policy Framework) record, a DKIM (Domain Key Identified Mail) record and a DMARC (Domain-based Message Authentication Reporting & Conformance) record:
* @ TXT "v=spf1 a mx include:_spf.client.uk.fabit.net -all"
* mail._domainkey CNAME webmail._domainkey.supporting-role.net.
* _dmarc TXT "v=DMARC1; p=reject"


NB For more information on DNS, please read [[What is DNS]].
NB For more information on DNS, please read [[What is DNS]].

[[Category:FAQ]]
[[Category:Domain]]

Latest revision as of 09:55, 1 May 2024

For a fabit system we require a number of DNS entries for your domain name. Not every situation is the same, but this is how we normally do it:

Dedicated Email Server

  • mail.<yourdomain>. is set to the external IP address of your mail server.
  • remote.<yourdomain>. is set to be a CNAME pointing at your fabit server (eg aa000019.uk.fabit.net.).
  • www.<yourdomain>. is usually set to be a CNAME pointing at the server hosting your website, (eg web1.uk.fabit.net.)
Incomplete

Shared Email Server

For the shared email server the settigns are below

MX Records

At a minimum we need some MX (Mail eXchange) records. We usually set up four MX:

  • @ MX 10 webmail.supporting-role.net.
  • @ MX 20 mx1.uk.fabit.net.
  • @ MX 30 mx2.uk.fabit.net.
  • @ MX 40 mx3.uk.fabit.net.

Auto Configuration

For autoconfiguration to work we need the following three CNAME records:

  • mail CNAME webmail.supporting-role.net.
  • autodiscover CNAME webmail.supporting-role.net.
  • autoconfig CNAME webmail.supporting-role.net.

Email Reputation

For the best possible anti-spoofing and email reputation we need an SPF (Sender Policy Framework) record, a DKIM (Domain Key Identified Mail) record and a DMARC (Domain-based Message Authentication Reporting & Conformance) record:

  • @ TXT "v=spf1 a mx include:_spf.client.uk.fabit.net -all"
  • mail._domainkey CNAME webmail._domainkey.supporting-role.net.
  • _dmarc TXT "v=DMARC1; p=reject"

NB For more information on DNS, please read What is DNS.