Home Setup Guide DNS Setup Guide
Technical Guide

DNS Setup Guide for Business Email

Master MX, SPF, DKIM, and DMARC records to ensure perfect email delivery and security.

Get DNS Setup Help

DNS (Domain Name System) records are critical for business email. Incorrect DNS configuration is the #1 reason emails don't deliver or end up in spam folders.

This guide explains each DNS record type, provides real examples, and shows you exactly what to configure for Nigerian businesses.

⚠️ Warning: Incorrect DNS records can prevent all email delivery. We strongly recommend professional setup. Contact us for help.

1. MX Records (Mail Exchange)

MX records tell other email servers where to deliver email for your domain. Without correct MX records, you won't receive any email.

What MX Records Look Like:

Type Priority Value
MX 10 mail.yourcompany.com
MX 20 mail2.yourcompany.com

How to Add MX Records:

  1. Log in to your domain registrar (Whogohost, Qservers, Namecheap, etc.)
  2. Find DNS Management or Zone Editor
  3. Add new MX record
  4. Enter priority (lower number = higher priority)
  5. Enter mail server hostname
  6. Save changes

💡 Pro Tip: Always use multiple MX records with different priorities for redundancy. If one mail server fails, email routes to the backup server automatically.

2. SPF Records (Sender Policy Framework)

SPF records list which mail servers are authorized to send email on behalf of your domain. This prevents spammers from spoofing your domain.

Example SPF Record:

v=spf1 mx a ip4:123.45.67.89 include:_spf.google.com ~all

What Each Part Means:

  • v=spf1 - SPF version 1
  • mx - Allow servers listed in MX records
  • a - Allow server with domain's A record
  • ip4:123.45.67.89 - Allow specific IP address
  • include:_spf.google.com - Include another domain's SPF policy
  • ~all - Soft fail for unauthorized servers (mark as suspicious)

How to Add SPF Record:

  1. Go to your DNS management panel
  2. Add new TXT record
  3. Name: @ (or leave blank for root domain)
  4. Value: Your SPF policy string
  5. TTL: 3600 (1 hour)
  6. Save changes

💡 Common Mistake: Nigerian businesses often forget to add their backup mail servers or web hosting IPs to SPF records, causing legitimate emails to be marked as spam.

3. DKIM Records (DomainKeys Identified Mail)

DKIM adds a digital signature to your emails, proving they actually came from your domain and haven't been tampered with.

Example DKIM Record:

default._domainkey.yourcompany.com TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC..."

How to Set Up DKIM:

  1. Your email server generates a public/private key pair
  2. Add the public key to DNS as a TXT record
  3. Email server uses private key to sign outgoing messages
  4. Receiving servers verify signature using public key from DNS

⚠️ Technical Alert: DKIM setup requires server-side configuration. You can't just add a DNS record—your mail server must be configured to sign messages first. We handle this for you.

4. DMARC Records (Domain-based Message Authentication)

DMARC tells receiving servers what to do when SPF or DKIM checks fail. It's the final layer of email authentication.

Example DMARC Record:

_dmarc.yourcompany.com TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourcompany.com; ruf=mailto:forensics@yourcompany.com; pct=100"

DMARC Policy Options:

  • p=none - Monitor only (no action, just send reports)
  • p=quarantine - Send suspicious emails to spam folder
  • p=reject - Reject failed emails completely
  • rua= - Email address for aggregate reports
  • ruf= - Email address for forensic reports
  • pct=100 - Apply policy to 100% of emails

Recommended DMARC Implementation:

  1. Week 1-2: Start with p=none to monitor
  2. Week 3-4: Review reports, fix any legitimate failures
  3. Week 5+: Upgrade to p=quarantine or p=reject

How to Verify DNS Records

Online Tools:

  • MXToolbox.com - Check MX, SPF, DKIM, DMARC records
  • Google Admin Toolbox - Comprehensive email testing
  • DMARC Analyzer - DMARC record validation

Common DNS Errors:

❌ Multiple SPF Records

Only ONE SPF record allowed per domain. Multiple SPF records cause all to be ignored.

❌ Wrong MX Priority

Lower priority number = higher priority. Setting backup server to priority 10 and main server to 20 is backwards.

❌ Missing Trailing Dot

Some DNS systems require a trailing dot: mail.yourcompany.com. vs mail.yourcompany.com (without dot causes issues).

Let Us Configure Your DNS Records

DNS configuration is technical and error-prone. One mistake can break your email completely. We've configured DNS for hundreds of Nigerian businesses—we'll get it right the first time.