Storing DNS entries with your domain host (scenario 3)

You need to store five DNS entries with your domain host in scenario 3:

  • Three rotating DKIM keys

  • MX/SPF/Redirect entry

  • DMARC entry

Authenticate your domain in Inxmail first: Always add your domain as a sending domain in Inxmail before setting up the corresponding DNS records with your domain host. Otherwise, there's a risk that unauthorized parties could authenticate the domain on their own platforms or instances. Be sure to follow this sequence - it is crucial for the security of your domain.

Missing entries? If you have not stored a bounce domain you will have missing entries. If the bounce domain is missing, only the three rotating DKIM keys are visible. The DMARC entry and the entry for MX/SPF/Redirect are not visible.

You can enter your bounce domain at a later date. To do so, scroll to the bottom of the Domain authentication page and enter the bounce domain in the Bounce domain (Return-Path) input field.

The bounce domain is visible in the mailing links: The bounce domain is visible in your mailing links later on. You should use a name for your bounce domain that is as neutral as possible (‘mail’, ‘news’ or ‘newsletter’, for example).

Step by step

  1. Open the Domain authentication page in the Sending domains agent.

  2. Copy the individual DNS entries to the clipboard using the Copy button.

  3. Store the DNS entries from the clipboard with your domain host. Consult with your IT department for assistance.

    The DNS records in the Sending domains agent enable you to send your emails via the Inxmail servers and still authenticate and sign your emails via your subdomain.

    Each domain host has different options for storing DNS entries. Please have your IT department take care of the adjustment or even consider asking your domain host for assistance.

    You need to store only the last part of the DNS entries that are indicated in blue with your domain host.

    Type

    DNS entry

    CNAME:
    DKIM

    inx45253839._domainkey.example.com. IN CNAME inx45253839._domainkey.example-com.domains.inxstaging.de.

    CNAME:
    DKIM

    inx31250006._domainkey.example.com. IN CNAME inx31250006._domainkey.example-com.domains.inxstaging.de.

    CNAME:
    DKIM

    inx20307582._domainkey.example.com. IN CNAME inx20307582._domainkey.example-com.domains.inxstaging.de.

    CNAME:
    MX/SPF/Redirect

    news.example.com. IN CNAME rdir.inxmail.com.

    TXT:
    DMARC

    _dmarc.example.com. IN TXT "v=DMARC1; p=reject"

    DMARC entry is optional: Storing the DMARC entry is optional in scenario 3. Changes made to the DMARC policy can have a major impact on the deliverability of emails for your domain. Consult with your internal IT department.

    Technical domain names end with a dot: Don’t be surprised about the dot at the end of the DNS entry indicated in blue. It is part of the DNS entry and should also be copied.

    DKIM

    After you have registered the DKIM entry with your ISP as described above, your sender domain will be signed with DKIM. One of the effects of this is that the Inxmail sender domains no longer appear in email clients. More detailed information can be found in the section DKIM (DomainKeys Identified Mail).

    MX (Mail Exchange)/SPF/Redirect

    After you have registered the MX/SPF/Redirect entry with your ISP as described above, Inxmail is the authorised sender for the technical sender address (‘bounce address’).

    DMARC

    Important: Changes made to the DMARC policy can have a major impact on the deliverability of emails for your domain. This applies not only to emails that you send via Inxmail Professional but to all the emails that you send via your domain.
    Changes to the DMARC policy should only be made by experienced IT/mail server administrators.

    If DKIM and SPF checks are not successful, the sending of mailings is prevented by Inxmail Professional. If you have registered the DMARC entry with your ISP as described above, mailings that do not pass the DKIM and SPF checks will not be sent (DMARC-Policy = ‘reject’).

  • You have stored the DNS entries with your domain host.

Note: The validation of DNS entries can take up to 72 hours.

Related topics