DNS Records Configuration - Going Straight to Spam Box???

I know that in order to hit the inbox, the main DNS records need to be properly set up. These are the main DNS records that every mail delivery system should have for their domain:

  • TLS
  • A
  • MX
  • DKIM
  • SPF
  • rPTR

The ones that I mainly need help with configuring right now are the following records:


I have iRedMail installed on my domain at: aaronsnewsletters dot com

What exactly should I set for the MX records if I set my main mail server to mail.aaronsnewsletters dot com?

Am I supposed to set the MX records for the root/apex of the domain or do I set them to aim at the “mail.aaronsnewsletters dot com”?

Also, what about the DKIM & SPF?

Am I supposed to try pointing at the root/apex or the subdomain with the “mail.”?

Any support is greatly appreciated.


Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hi @AaronEsteban1,

The MX record doesn’t really matter that much in a way of setting it up. Basically, you just need to point it to your e-mail server.

Now, about the SPF and DKIM, this is a bit more tricky. The SPF record, provides information for the hosts from which you can send out e-mails. Usually, it contains an IP address(of your e-mail server) which is allowed to send out. If you google for an SPF generator you’ll see a lot of tools.

The DKIM record is like an SSH key, it has a private and a public part. The public part is send with the message and if the server that’s receiving the message can’t unlock it with your private message it’s considered an invalid message, like spam. Usually, if you are using a webpanel like cPanel, Plesk, CentOS WebPanel you get this generated automatically. If you are just using a mailing service like Postfix or Exim you need to generate it manually on your droplet.

Regards, KFSys