Mail for domain

Configuring DNS records

In order for Yandex.Mail to work, you must configure your DNS records according to Yandex requirements. The domain must be delegated to servers belonging to a single company. Delegation is performed in the registrar's control panel, but DNS record configuration is performed in the DNS control panel of your domain's DNS hosting company.

Wait while the changes take effect in DNS. This process may take up to 72 hours.

You can check:

In the Site address or Hostnames or IP addresses field, enter the name of your domain (for example, “yourdomain.tld”). In the drop-down list, choose “NS” and click Request or Dig. The same NS servers should respond to both requests.

If delegation settings are correct, check the other DNS records.

MX record

You can check the configured MX record using the dig tool http://www.ip-ping.ru/dig/?host=&rt=4&server= or http://www.digwebinterface.com/?hostnames=&type=MX&ns=resolver&useresolver=8.8.4.4&nameservers=.

To do this:

  1. Enter the name of your domain (for example, “yourdomain.tld”) in Site address or Hostnames or IP addresses.

  2. Choose MX in the drop-down list and click Request or Dig.

If the record is configured correctly, the response will be something like this:

yourdomain.tld. 21521 IN MX 10 mx.yandex.net.

Possible problems:

  • The server doesn't respond to the request or the wrong value is returned. This means that either the changes haven't propagated yet, or the MX record was not set up correctly.

  • Besides the Yandex MX record, the response had MX records pointing to other servers.

    To resolve this problem, delete the records about the other servers. To do this, go to the DNS management section where you configured the Yandex MX record.

  • The record in the server response is in the format “mx.yandex.net.yourdomain.tld.”. You must add the dot at the end of the MX record value: “mx.yandex.net.”.

SPF record

You can check the configured SPF record using the dig tool http://www.ip-ping.ru/dig/?host=&rt=7&server= or http://www.digwebinterface.com/?hostnames=&type=TXT&ns=resolver&useresolver=8.8.4.4&nameservers=.

To do this:

  1. Enter the name of your domain (for example, “yourdomain.tld”) in Site address or Hostnames or IP addresses.

  2. Choose TXT in the drop-down list and click Request or Dig.

If the record is configured correctly, the response will be something like this:

yourdomain.tld. 21600 IN TXT "v=spf1 redirect=_spf.yandex.net"

or

yourdomain.tld. 21600 IN TXT "v=spf1 ip4:IP-1 ip4:IP-2 ip4:IP-3 include:_spf.yandex.net ~all"

Possible problems:

  • The server doesn't respond to the request or the wrong value is returned. This might mean that either the changes haven't propagated yet, or the SPF record was not set up correctly.

  • Besides the Yandex SPF record, the response had SPF records pointing to other servers. To fix this error, delete the other SPF records. You can do this in the DNS management section where you configured the Yandex SPF record.

DKIM signature

You can check the configured DKIM signature using the dig tool http://www.ip-ping.ru/dig/?host=&rt=7&server= or http://www.digwebinterface.com/?hostnames=&type=TXT&ns=resolver&useresolver=8.8.4.4&nameservers=.

To do this:

  1. Specify the name of the subdomain (for example, "mail._domainkey.yourdomain.tld") in Site address or Hostnames or IP addresses.

  2. Choose TXT in the drop-down list and click Request or Dig.

If the record is configured correctly, the response will be something like this:

mail._domainkey.yourdomain.tld. 21599 IN TXT "v=DKIM1\; k=rsa\; t=s\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlk+IUXTHUIumVpG1S0vwFuwO9AC2aRrJj21MLj7xvO0Brys/fDxOTaFsoVsA2/t9mcxf1kqx/bCsEvJiiOUUw5eihQefcY7xJoeruJK/o+IKU2dTO9OOPfSyqGLuQ+v/DMJRjhz73XOpkPOpPwLhQKhvBLNM2TCxPqCL0E42/7wIDAQAB"

If:

  • The server doesn't respond to the request or you get the wrong value, either the changes haven't propagated yet, or the DKIM signature was not set up correctly.

  • The response had other DKIM signatures containing other keys besides the Yandex DKIM signature, delete them. To do this, go to the DNS management section where you configured the Yandex DKIM signature.

SRV records

You can check the configured SRV record using the dig tool http://www.ip-ping.ru/dig/?host=&rt=11&server= or http://www.digwebinterface.com/?hostnames=&type=SRV&ns=resolver&useresolver=8.8.4.4&nameservers=.

To do this:

  1. Specify the subdomain name (for example, “_xmpp-client._tcp.yourdomain.tld”, “_xmpp-server._tcp.yourdomain.tld”, “_xmpp-client._tcp.conference.yourdomain.tld” or “_xmpp-server._tcp.conference.yourdomain.tld”) in Site address or Hostnames or IP addresses.

  2. Choose SRV in the drop-down list and click Request or Dig.

If the record is configured correctly, the response will be one of the following:

_xmpp-client._tcp.yourdomain.tld. 21599 IN SRV 20 0 5222 domain-xmpp.yandex.net.
_xmpp-server._tcp.yourdomain.tld. 21599 IN SRV 20 0 5269 domain-xmpp.yandex.net.
_xmpp-client._tcp.conference.yourdomain.tld. 21599 IN SRV 20 0 5222 domain-xmpp.yandex.net.
_xmpp-server._tcp.conference.yourdomain.tld. 21599 IN SRV 20 0 5269 domain-xmpp.yandex.net.

If:

  • The server doesn't respond to the request or you get the wrong value, either the changes haven't propagated yet, or the SRV record was not set up correctly.

  • The SRV record is configured with the value “domain-xmpp.ya.ru.”, you must change it to “domain-xmpp.yandex.net.”.

CNAME record

You can check the configured CNAME record using a dig tool (for example, http://www.digwebinterface.com).

To do this:

  1. Specify the name of the subdomain (for example, “mail.yourdomain.tld”) as the site address.

  2. Choose the TXT type of record and send the request.

If the records are configured correctly, the response will be something like this:

mail.yourdomain.tld. 21599 IN CNAME domain.mail.yandex.net.

Possible problems:

  • If the server doesn't respond to the request or you get the wrong value, either the changes haven't propagated yet, or the CNAME record was not set up correctly.

  • If the response has other CNAME records besides the Yandex CNAME record that point to other servers, delete them. To do this, go to the DNS management page where you configured the Yandex CNAME record.

  • If the CNAME record is set up correctly and responds to the request, but the link such as "mail.yourdomain.tld" doesn't work, it's possible that A-records are also configured for the “mail.yourdomain.tld” subdomain. In order for Yandex.Mail for Domain to work correctly, the A-records should be deleted.

The suggestions didn't help

If the recommendations above didn't help, or you have another question related to configuring DNS records, use the feedback form to send us a message.

Feedback