Mail DNS
DNS & Authentication — JKMail
Configure MX and email-authentication records before relying on a domain for production mail.
MX records
The MX record tells other mail servers where messages for the domain should be delivered. The MX target must resolve to the intended JKMail host.
SPF
SPF identifies servers authorised to send mail for a domain. Maintain one valid SPF policy that reflects the actual outbound infrastructure.
DKIM
DKIM allows outgoing messages to be cryptographically signed. The corresponding public key is published in DNS under the configured selector.
DMARC
DMARC defines how receiving systems should evaluate alignment with SPF and DKIM and provides a policy framework for handling authentication failures.
DNS validation
- Verify MX from authoritative or public resolvers.
- Verify the mail-host address record.
- Check SPF syntax.
- Confirm the DKIM selector resolves.
- Ensure only the intended DMARC policy is published.