Setting up DNS

To accept and send email on your domain, set up the records we generate for you when you attach the domain in /tools/business-email.

Records you'll add

For yourdomain.com, you'll get a set roughly shaped like this — the exact values come from your dashboard:

Type	Host	Value	Purpose
MX	@	<provided in dashboard> (priority 10)	Where inbound mail goes
TXT	@	<provided in dashboard> (SPF)	Authorize us to send as your domain
CNAME	s1._domainkey	<provided in dashboard>	DKIM key 1
CNAME	s2._domainkey	<provided in dashboard>	DKIM key 2
TXT	_dmarc	v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com	DMARC policy

The MX and DKIM values are unique to your account. Copy them from the dashboard at attach time — don't try to construct them by hand.

If your DNS is at Suzko

/tools/business-email → attach domain → Auto-configure DNS button. We add all of the above directly. Verification + DKIM activation takes 1–10 minutes.

If your DNS is elsewhere

Copy the values from the dashboard, add them in your DNS provider's UI. Things to watch for:

• Trailing dots — most DNS providers add them automatically for CNAMEs; if yours doesn't, add it.
• TXT quoting — paste the SPF value as a single quoted string; some providers split long ones into chunks.
• Existing MX records — if you currently have email somewhere else (Google Workspace, Microsoft 365, etc.), adding the new MX will break the old one. Plan a cutover (set everything up, lower TTL, then flip).

Verifying

After DNS is set, the dashboard shows a Verify button. Click — we check the records and turn the domain green when everything resolves correctly.

DKIM signatures activate within minutes of verification. Inbound mail starts working immediately after MX propagates.

Why all four records

• MX — receives mail
• SPF — tells receivers Suzko is allowed to send for you (stops spoofing)
• DKIM — cryptographically signs outbound mail
• DMARC — instructs receivers what to do with mail that fails SPF/DKIM (p=quarantine = spam folder; p=reject = bounce)

Skipping SPF/DKIM means your mail will land in spam folders. Skipping DMARC means anyone can spoof your domain.

Common problems

• MX added but inbound bounces — wait an hour for full propagation. Test from a different mail provider (Gmail) than your old one.
• DKIM fails — the CNAMEs didn't add right, often a trailing- dot issue. Compare the live record (dig CNAME s1._domainkey.yourdomain.com) against what the dashboard says.
• DMARC reports flood in — your rua= mailbox gets daily reports from receivers. That's normal. Filter them to a folder.