Configure DNS records to send emails

After setting up your mail server, configuring the correct DNS settings is a crucial step for the mail server to work properly. In particular, it is important to configure the server so that emails sent from it do not end up in spam and attackers can’t send phishing emails on your behalf.

Anti-spam and anti-spoofing measures to counter such threats are configured via DNS. This is because usually only the true owner of the mail server has control over the DNS domain zone and can prove the validity of the mail server configuration.

Note: This product documentation guide describes the DNS configuration for those domains which are already delegated to Gcore name servers. You first need to create a DNS zone according to the guide: Getting started with Managed DNS.

Step 1. Set up an A record

An A record links a domain name to an IP address. For example, if your mail server's IP address is 192.0.2.1, you'd set up an A record like this:

      Copy
      
    mail.sample-test.com. IN A 192.0.2.1

Add an A record according to our guide on how to manage DNS records.

Step 2. Set up an MX record

An MX record binds your domain to the mail server you have created. Without an MX record, incoming mail on your domain will not work. It is recommended that you have more than one mail server so that the second one acts as a backup if the first one fails. For example, if your domain is sample-test.com and your mail server is mail.sample-test.com, you'd set up an MX record like this:

      Copy
      
    sample-test.com. IN MX 10 mail.sample-test.com.

Add an MX record according to our guide on how to manage DNS records.

Step 3. Set up a PTR record

A PTR record, or reverse DNS record, links an IP address to a domain name. This is helpful for verifying the authenticity of your server. You can learn more about how it works and how to configure it in our guide about a PTR record and reverse DNS zone.

PTR records are typically set up by your service provider, so you'll need to get in touch with them to set up a reverse DNS zone (RDNS). Afterward, you can add a PTR record in the Gcore Customer Portal according to our guide on how to manage DNS records.

If the IP Address of your mail server is 192.0.2.1, you'd set up a PTR record like this:

      Copy
      
    1.2.0.192.in-addr.arpa IN PTR mail.sample-test.com.

Step 4. Set up SPF (TXT)

An SPF (Sender Policy Framework) record defines which IP addresses are allowed to send mail from your domain. Your domain’s security measures help prevent spam from being sent. An SPF record is added as a TXT record in your DNS. Add an SPF record in the Gcore Customer Portal according to our guide on how to manage DNS records. An example of an SPF record is:

      Copy
      
    sample-test.com. IN TXT "v=spf1 mx -all"

This means only the IP addresses for the MX records in sample-test.com, i.e. mail.sample-test.com (with the IP 192.0.2.1,) are allowed to send mail on behalf of the domain. -all means all other traffic should be considered spam.

Step 5. Set up a DKIM record

A DKIM (DomainKeys Identified Mail) record adds a digital signature to your messages, allowing recipients to verify that the mail indeed came from your server. A DKIM record is set up as a TXT record but requires a more complex setup process and adjustments of your mail server configuration, including generating a public and private key for signing and verification. This may require some technical knowledge or a utility that automates this process such as a DKIM Generator from EasyDMARC, or from DMARCLY.

Step 6. Set up a DMARC policy (TXT)

A DMARC (Domain-based Message Authentication, Reporting and Conformance) record is used to define how to handle emails that fail SPF and DKIM checks. This helps to minimize harm from spam and security vulnerabilities. When an email is received, the recipient’s mail server checks the SPF and DKIM records of the sending domain. If they pass the checks, the email is considered authentic. If either or both checks fail, the DMARC policy is examined.

The DMARC policy instructs the recipient's mail server on how to handle failed authentication emails. The policy can be set to none (no action taken), quarantine (mark as spam or place in a separate folder), or reject (block the email).

Here’s an example of a DMARC record in DNS settings:

      Copy
      
    _dmarc.sample-test.com. IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@sample-test.com; ruf=mailto:dmarc-forensics@sample-test.com;"

In this example, the domain owner has set a DMARC policy to quarantineany emails that fail authentication. The rua parameter specifies the email address where aggregate reports will be sent, while the ruf parameter specifies the email address where forensic (detailed) reports will be sent.

You’ve now completed the necessary steps to configure the DNS for the mail server so that there are no problems with incoming and outgoing mail.