DNS & DKIM Questions : Pre-Install Prep

Community Support
2

In HESTIA you have to:

  • create NS records
    ** ns1.domain.tld
    ** ns2.domain.tld
  • also create A records
    ** ns1.domain.tld A 123.123.123.123 (IP of your server)
    ** ns2.domain.tld A 123.123.123.123 (IP of your ns or a different dns server if configured)

Then, go to the domain registrar and set:
ns1.domain.tld and ns2.domain.tld as the DNS servers for every domain that you use.

After that, the world will recognize and use your DNS servers as the true ones.

You may check https://dnschecker.org/ to see if there is any problem.

In HESTIA you have to:

  • Create client
  • Assign them to a hosting plan
  • Assign domains to DNS, EMAIL, WEB, DATABASE, etc.

You may select a DNS template OR edit your own DNS template

After creating a DNS domain under an user you may customize the zones and choose DKIM and so on.
just bear in mind that you set a valid MX record.

To create a valid MX record you can:

  • In domain.tld DNS configuration create: hostname.domain.tld A 123.123.123.123 (the IP of the VPS)
  • In customerdomain.tld create: @ MX hostname.domain.tld
  • In customerdomain.tld create: @ TXT “v=spf1 +a +mx +a:smtp.customerdomain.tld include:own-spf.domain.tld include:ext-spf.domain.tld -all” (or anything that suits your needs)

The include:own-spf.domain.tld include:ext-spf.domain.tld part consists of two lists. The first one with all my servers so I can send from any of my servers and the second one has google, mailchimp and so on. You can delete the includes if you want and leave: “v=spf1 +a +mx +a:smtp.customerdomain.tld -all” or even leave: “v=spf1 +a +mx”

The +mx part is the one that authorizes hostname.domain.tld to send emails on behalf of customerdomain.tld
The +a part authorizes the web server (if it were a different one) to send emails on behalf of customerdomain.tld

  • Use subdomain.domain.tld Don’t use domain.tld
  • subdomain.domain.tld will be under the admin account and hosts only WEB in order to provide you with a valid SSL certificate.
  • domain.tld will be under a normal user’s account and under that user’s DNS settings you will configure.

I hope this helps.

2 Likes