> ## Documentation Index
> Fetch the complete documentation index at: https://docs.digitalfyre.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS Configuration

Before you can send and receive email with Open-Xchange, you need to add the required DNS records to your domain. These records are displayed in the customer portal under the **DNS Settings** tab of your service.

## Accessing DNS Settings

1. Log in to the [customer portal](https://console.digitalfyre.com)
2. Go to **Services → My Services**
3. Click your Open-Xchange service
4. Click **Manage Email Accounts**
5. Select the **DNS Settings** tab

## Required Records

### MX Records

Add all four MX records with priority **10**:

| Type | Priority | Value                         |
| ---- | :------: | ----------------------------- |
| MX   |    10    | `mx001.cloudus.xion.oxcs.net` |
| MX   |    10    | `mx002.cloudus.xion.oxcs.net` |
| MX   |    10    | `mx003.cloudus.xion.oxcs.net` |
| MX   |    10    | `mx004.cloudus.xion.oxcs.net` |

### SPF Record

Add a TXT record on your domain's root:

```dns theme={"theme":{"light":"light-plus","dark":"ayu-dark"}}
v=spf1 include:spf.cloudus.oxcs.net ~all
```

If you already have an existing SPF record (e.g., for another email service), merge them into a single record. SPF only allows one TXT record per domain. For example:

```dns theme={"theme":{"light":"light-plus","dark":"ayu-dark"}}
v=spf1 include:spf.cloudus.oxcs.net include:_spf.google.com ~all
```

### DKIM

Open-Xchange automatically signs all outgoing email with DKIM. No DNS changes are required on your end.

### DMARC Record

A suggested DMARC record is shown in the DNS Settings tab. Add it as a TXT record on `_dmarc.yourdomain.com`:

```dns theme={"theme":{"light":"light-plus","dark":"ayu-dark"}}
v=DMARC1; p=quarantine; rua=mailto:postmaster@example.com; ruf=mailto:support@example.com; fo=1; pct=100
```

Replace the `rua` and `ruf` email addresses with your own. These addresses receive aggregate and forensic DMARC reports, respectively.

<Info>
  If you are setting up DMARC for the first time, consider starting with `p=none` to collect reports before enforcing a stricter policy. See the [SPF, DKIM & DMARC guide](/guides/email-spf-dkim-and-dmarc) for a recommended rollout strategy.
</Info>

## Verifying DNS

After adding your records, allow time for DNS propagation (typically a few minutes to 48 hours, depending on TTL). You can verify your records using [MXToolbox](https://mxtoolbox.com/SuperTool.aspx) or the diagnostic tools listed in the [SPF, DKIM & DMARC guide](/guides/email-spf-dkim-and-dmarc).