The DNS Records page checks the DNS configuration for each of your mail domains and tells you exactly what records to add. It verifies records in real time, calculates a deliverability score, and provides copy-ready values for your DNS provider.
Selecting a domain
If you have more than one domain configured, a searchable dropdown at the top lets you switch between them. The page loads the first domain by default.
Domain health
Two indicators summarize your DNS status at a glance:
- Health ring - a circular progress indicator showing how many records are verified out of the total (e.g., "4/6"). It turns green when most records pass, yellow when some are missing, and red when most are unverified.
- Deliverability score - a weighted bar showing your overall email deliverability readiness. Different record types carry different weight in the score.
A row of status dots below the health ring gives a per-record visual: green for verified, yellow for not found.
Record groups
Records are organized into two groups:
Mail Routing
| Record | Name | Purpose |
|---|---|---|
| A | Your mail hostname | Points the hostname to your server IP |
| MX | Your domain | Directs incoming email to your mail server (priority 10) |
| PTR | Your server IP | Reverse DNS - maps your IP back to your mail hostname |
Email Authentication
| Record | Name | Purpose |
|---|---|---|
| SPF | Your domain | Declares which IPs are authorized to send email |
| DKIM | mail._domainkey.{domain} |
Cryptographic signature proving email authenticity |
| DMARC | _dmarc.{domain} |
Policy for handling emails that fail SPF or DKIM |
Each group shows a badge with the verified count (e.g., "3/3").
Viewing record details
Click any record row to expand it. The expanded view shows:
- Required value - the DNS record you need to add, in a code block you can copy
- Current DNS value - what the dashboard found when it queried DNS. Green if it matches, yellow if not found or mismatched.
- Setup guide - step-by-step instructions for adding the record at your DNS provider (shown for unverified records)
PTR (reverse DNS) records are configured at your hosting provider, not your domain registrar. Check your VPS provider's control panel for reverse DNS settings.
Recommended records
A collapsible Recommended Records section at the bottom shows two additional records that improve security but aren't required for basic email delivery:
| Record | Name | Purpose |
|---|---|---|
| MTA-STS | _mta-sts.{domain} |
Enforces TLS encryption for incoming mail, preventing downgrade attacks. CeyMail can provision the policy host and Let's Encrypt certificate automatically. |
| TLSRPT | _smtp._tls.{domain} |
Receives reports about TLS negotiation failures from sending servers |
Re-checking records
Click the Re-check button to refresh DNS verification for the selected domain. This queries DNS in real time, so you can verify records immediately after adding them at your DNS provider.
Copying records
- Click the Copy button on any individual record to copy its value
- Click Copy All at the top to copy all records for the domain in a tab-separated format you can paste into a spreadsheet or notes
SMTP relay and DNS scoring
If you have an SMTP relay configured, the deliverability score adjusts accordingly. Records that are handled by the relay provider (A, SPF, DKIM, and PTR) are credited automatically, since the relay's infrastructure takes over deliverability responsibility for those records.