How to setup my DNS records: Difference between revisions
From Supporting Role Wiki
Jump to navigationJump to search
No edit summary |
|||
| Line 28: | Line 28: | ||
For the best possible anti-spoofing and email reputation we need an SPF (Sender Policy Framework) record, a DKIM (Domain Key Identified Mail) record and a DMARC (Domain-based Message Authentication Reporting & Conformance) record: |
For the best possible anti-spoofing and email reputation we need an SPF (Sender Policy Framework) record, a DKIM (Domain Key Identified Mail) record and a DMARC (Domain-based Message Authentication Reporting & Conformance) record: |
||
* @ TXT "v=spf1 a mx include:_spf.client.uk.fabit.net -all" |
* @ TXT "v=spf1 a mx include:_spf.client.uk.fabit.net -all" |
||
* mail._domainkey CNAME webmail.supporting-role.net. |
* mail._domainkey CNAME webmail._domainkey.supporting-role.net. |
||
* _dmarc TXT "v=DMARC1; p=reject" |
* _dmarc TXT "v=DMARC1; p=reject" |
||
Latest revision as of 09:55, 1 May 2024
For a fabit system we require a number of DNS entries for your domain name. Not every situation is the same, but this is how we normally do it:
Dedicated Email Server
- mail.<yourdomain>. is set to the external IP address of your mail server.
- remote.<yourdomain>. is set to be a CNAME pointing at your fabit server (eg aa000019.uk.fabit.net.).
- www.<yourdomain>. is usually set to be a CNAME pointing at the server hosting your website, (eg web1.uk.fabit.net.)
- Incomplete
For the shared email server the settigns are below
MX Records
At a minimum we need some MX (Mail eXchange) records. We usually set up four MX:
- @ MX 10 webmail.supporting-role.net.
- @ MX 20 mx1.uk.fabit.net.
- @ MX 30 mx2.uk.fabit.net.
- @ MX 40 mx3.uk.fabit.net.
Auto Configuration
For autoconfiguration to work we need the following three CNAME records:
- mail CNAME webmail.supporting-role.net.
- autodiscover CNAME webmail.supporting-role.net.
- autoconfig CNAME webmail.supporting-role.net.
Email Reputation
For the best possible anti-spoofing and email reputation we need an SPF (Sender Policy Framework) record, a DKIM (Domain Key Identified Mail) record and a DMARC (Domain-based Message Authentication Reporting & Conformance) record:
- @ TXT "v=spf1 a mx include:_spf.client.uk.fabit.net -all"
- mail._domainkey CNAME webmail._domainkey.supporting-role.net.
- _dmarc TXT "v=DMARC1; p=reject"
NB For more information on DNS, please read What is DNS.