> ## Documentation Index
> Fetch the complete documentation index at: https://jetemail.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS Records

> Publish the MX, DKIM, SPF, and DMARC records that forwarding requires

## Required records

Forwarding mode requires four DNS records on your domain. Inbound mail is rejected with `550` until all four verify. Replace `example.com` with your domain. The Dashboard's **Settings** tab shows the same values pre-filled with copy buttons.

| Record | Type  | Host                         | Value                                         | Priority |
| ------ | ----- | ---------------------------- | --------------------------------------------- | -------- |
| MX     | MX    | `example.com`                | `smtp.jetsmtp.net`                            | `10`     |
| DKIM   | CNAME | `je1._domainkey.example.com` | `inbound.jetsmtp.net`                         |          |
| SPF    | TXT   | `example.com`                | `v=spf1 include:inbound-spf.jetsmtp.net -all` |          |
| DMARC  | TXT   | `_dmarc.example.com`         | `v=DMARC1; p=none`                            |          |

<Info>
  `p=none` is the minimum DMARC policy that will pass verification. Stricter policies (`p=quarantine`, `p=reject`) also pass, so pick whichever your organization is ready for.
</Info>

## Verifying

<Steps>
  <Step title="Publish the records at your DNS provider">
    Add the four records exactly as shown above. Most providers strip the trailing `.example.com` from host names automatically. If yours requires the full FQDN, paste the host as shown.
  </Step>

  <Step title="Click Check DNS">
    On the Forwarding domain's **Settings** tab, click **Check DNS**. We resolve all four records and update each row to **Verified** or **Pending**. Re-run as records propagate.
  </Step>

  <Step title="Wait for propagation if needed">
    DNS changes can take anywhere from a few seconds to a few hours to be visible to our resolvers. If a record is correct but still pending, give it 5–10 minutes and run the check again.
  </Step>
</Steps>

## Troubleshooting

**MX is pending.** Confirm there's only one MX record on the apex of your domain. Multiple competing MX records will fail verification. Don't point MX at `mail.example.com` or any other intermediate hostname; it must resolve directly to `smtp.jetsmtp.net`.

**SPF is pending.** If you already have an `v=spf1` record (e.g. from another sender), merge the include rather than adding a second TXT record. Only one SPF record is permitted per domain:

```
v=spf1 include:_spf.othersender.com include:inbound-spf.jetsmtp.net -all
```

**DKIM is pending.** Some providers append your apex domain automatically. If you enter `je1._domainkey.example.com` as the host and it becomes `je1._domainkey.example.com.example.com`, drop the trailing `.example.com` from the host field.

**DMARC is pending.** Make sure the host is `_dmarc.example.com` (with the underscore). If you already have a DMARC record, leave it alone. Anything `p=none` or stricter passes.