Skip to content

Add your email records at Amazon Route 53

How to add the DNS records that connect your domain to Mühür Mail in the Amazon Route 53 dashboard. The record values are ready in the Mühür Mail dashboard, in your domain's DNS records step.

If your DNS is on Amazon Route 53, your name servers contain awsdns. You add the records in the AWS console, in your domain's hosted zone.

Open the DNS settings

  1. Open Route 53 in the AWS Management Console and choose Hosted zones.
  2. Open your domain's hosted zone.
  3. For each record, press Create record, set the name and type, enter the value and save with Create records.

Fields in the record form

  • Record name: the relative name; leave it empty for the domain itself.
  • Record type: the record type.
  • Value: the record value; put multiple values on separate lines.
  • TTL (seconds): 300 or 3600 works well.
  • Routing policy: Simple routing.

Records to add

Add the records in this order. The values in the tables are examples that show the format; copy the values for your domain from the Mühür Mail dashboard.

  1. Ownership record (TXT)

    Required

    Proves the domain is yours. The name is _muhur; the value is the text starting with muhur-verify= in your dashboard. Once ownership is proven, you can create mailboxes.

    Enter the value in double quotes: "muhur-verify=…".

    ExampleOwnership record (TXT): example records
    TypeNameValue
    TXT_muhur
    muhur-verify=…

    Value is in your dashboard

  2. MX records

    Required

    Make email sent to your domain arrive at Mühür Mail. The name is @, the domain itself; enter the server name and priority for each MX. If you are moving from another provider, remove the old MX records once your mailboxes are ready in Mühür Mail.

    Put one MX per line in Value: 10 mx1.muhurmail.com and 20 mx2.muhurmail.com.

    ExampleMX records: example records
    TypeNameValuePriority
    MX@
    mx1.muhurmail.com
    10
    MX@
    mx2.muhurmail.com
    20
  3. SPF record (TXT)

    Required

    States that Mühür Mail's servers may send on your behalf. A domain must have only one SPF record: if you already have one, don't add another; replace the existing record with the merged value suggested in the dashboard.

    If the root has other TXT records, add SPF as a new line in the same record; don't create a separate TXT record.

    ExampleSPF record (TXT): example records
    TypeNameValue
    TXT@
    v=spf1 include:_spf.muhurmail.com ~all

    Value is in your dashboard

  4. DKIM record (CNAME or TXT)

    Required

    The key used to verify the signature on outgoing messages. The name looks like muhur1._domainkey. If the dashboard gives the record as a CNAME, add a CNAME; if it gives a TXT, add a TXT, and copy the value exactly. If a second selector (muhur2) is shown, add it too.

    If DKIM is given as TXT, split the key into quoted strings of up to 255 characters: "v=DKIM1; k=rsa; p=MIIB…" "…rest". If it is given as a CNAME, no splitting is needed.

    ExampleDKIM record (CNAME or TXT): example records
    TypeNameValue
    CNAMEmuhur1._domainkey
    muhur1.d….dkim.muhurmail.com

    Value is in your dashboard

  5. DMARC record (TXT)

    Recommended

    Tells receivers what to do with messages that fail SPF and DKIM, and sends reports to Mühür Mail. The name is _dmarc. If you already have a DMARC record, don't add a second one; you can change the policy later in the Mühür Mail dashboard.

    ExampleDMARC record (TXT): example records
    TypeNameValue
    TXT_dmarc
    v=DMARC1; p=none; rua=mailto:dmarc@muhurmail.com; adkim=r; aspf=r; fo=1
  6. MTA-STS records (CNAME and TXT)

    Recommended

    Asks senders to deliver email to your domain over an encrypted connection. Add a CNAME named mta-sts and a TXT named _mta-sts. Mühür Mail serves the policy file; copy the id in the TXT from the dashboard.

    ExampleMTA-STS records (CNAME and TXT): example records
    TypeNameValue
    CNAMEmta-sts
    mta-sts.muhurmail.com
    TXT_mta-sts
    v=STSv1; id=…

    Value is in your dashboard

  7. TLS-RPT record (TXT)

    Recommended

    Gives the address where problems with encrypted delivery are reported. The name is _smtp._tls.

    ExampleTLS-RPT record (TXT): example records
    TypeNameValue
    TXT_smtp._tls
    v=TLSRPTv1; rua=mailto:tlsrpt@muhurmail.com
  8. Email app records (CNAME)

    Optional

    Let apps such as Thunderbird and Outlook find the server settings on their own: CNAMEs named autoconfig and autodiscover. The dashboard also suggests SRV records for IMAP and SMTP; if your provider supports SRV records, you can add those too. These records are optional.

    ExampleEmail app records (CNAME): example records
    TypeNameValue
    CNAMEautoconfig
    autoconfig.muhurmail.com
    CNAMEautodiscover
    autoconfig.muhurmail.com

Things to watch for

  • TXT values are written in double quotes: "v=spf1 include:_spf.muhurmail.com ~all".
  • Route 53 keeps one record per name and type. If the root already has a TXT record, add SPF as a new line in that record's Value; MX records are also written line by line in a single record.
  • TXT values longer than 255 characters (such as a DKIM key given as TXT) must be split into several quoted strings on the same line.

Check

After saving the records, press “Check” on your domain's page in the Mühür Mail dashboard. New records usually show up within a few minutes, occasionally a few hours. You can also see the status with the domain checker.

Let Mühür Mail prepare your records

Add your domain; the records you need are ready in the dashboard, and Mühür Mail checks them as you add them.