Storing DNS entries with your domain host (scenario 2)

You store five DNS entries with your domain host in scenario 2:

  • Three rotating DKIM keys

  • MX/SPF/Redirect entry

  • DMARC entry

Step by step

  1. Open the Domain Authentication page in the Brand Identity Protection agent.

  2. Copy the individual DNS entries to the clipboard using the Copy button.

  3. Store the DNS entries from the clipboard with your domain host. Consult with your IT department for assistance.

    The DNS entries in the Brand Identity Protection agent enable you to send your emails via the Inxmail servers and still authenticate and sign your emails via your subdomain.

    Each domain host has different options for storing DNS entries. Please have your IT department take care of the adjustment or even consider asking your domain host for assistance.

    You need to store only the last part of the DNS entries that is indicated in blue with your domain host.

    Type

    DNS entry

    CNAME:
    DKIM

    inx83723037._domainkey.subdomain.example.com. IN CNAME inx83723037._domainkey.subdomain-example-com.domains.inxserver.com.

    CNAME:
    DKIM

    inx15122940._domainkey.subdomain.example.com. IN CNAME inx15122940._domainkey.subdomain-example-com.domains.inxserver.com.

    CNAME:
    DKIM

    inx95945809._domainkey.subdomain.example.com. IN CNAME inx95945809._domainkey.subdomain-example-com.domains.inxserver.com.

    CNAME:
    MX/SPF/Redirect

    subdomain.example.com. IN CNAME rdir.inxmail.com.

    TXT:
    DMARC

    _dmarc.subdomain.example.com. IN TXT "v=DMARC1; p=reject"

    Technical domain names end with a dot: Don’t be surprised about the dot at the end of the DNS entry indicated in blue. It is part of the DNS entry and should also be copied.

    DMARC You can copy the DMARC entry exactly without any changes and store it with your domain host, or you can adjust it to meet your specific requirements. For explanations on how to construct DMARC entries, see DMARC: Overview.

    DKIM

    After you have registered the DKIM entry with your ISP as described above, your sender domain will be signed with DKIM. For security reasons, Inxmail periodically changes the DKIM keys. Therefore, you do not need to store any further DNS entries with your ISP in connection with DKIM.

    MX (Mail Exchange)/SPF/Redirect

    If you have registered the DNS entries with your ISP as described above, Inxmail is able to set up mailboxes such as the technical sender address and the visible sender address and manage the mailboxes. This ensures (automatically) that the MX settings are correct and that you do not need to take any further action.

    This also ensures that Inxmail is an authorized sender for your sender address. Therefore, you do not need to store any further DNS entries with your ISP in connection with SPF.

    DMARC

    If you have registered the default DMARC entry from Inxmail Professional with your ISP, the DMARC policy that is set is "reject" (=email will not be delivered). This means: If DKIM and SPF checks are unsuccessful, the sending of mailings is prevented by Inxmail Professional.

    Alternatively, you can adapt the DMARC entry to meet your own requirements or policies.

  • You have stored the DNS entries with your domain host.

Note: The validation of DNS entries can take up to 72 hours.

Related topics