Why this lives outside the panel

Mila hosts your mail, but your domain's DNS is controlled wherever you registered or point that domain -- a registrar, a separate DNS host, or your own name servers. The panel can generate the exact record values a domain needs and verify them once they're published, but publishing them happens on your DNS provider's side. This guide explains what each record does so the panel's DNS page isn't a wall of unfamiliar acronyms.

MX: where mail gets delivered

The MX record is what tells the rest of the internet's mail servers where to send messages addressed to your domain. Without a correct MX record, mail sent to your addresses has nowhere to go and bounces back to the sender -- this is the one record that has to be right before anything else works. Copy the exact host and priority the panel's Domain > DNS page shows for your domain; it's generated per domain rather than being a fixed value.

SPF: who's allowed to send as your domain

SPF is a TXT record listing which mail servers are authorized to send mail claiming to be from your domain. Receiving servers check the sending server's IP against it and treat unlisted senders with more suspicion -- this is one of the main defenses against someone forging your domain in the From header. If you send from other services in addition to Mila (a marketing tool, an invoicing system), all of them need to be included in the same SPF record; a domain can only have one.

DKIM: signing outgoing mail

DKIM attaches a cryptographic signature to every message your domain sends, generated from a private key Mila holds and verified against a public key published in your DNS. A receiving server that can verify the signature knows the message wasn't altered in transit and really did originate from infrastructure authorized to sign for your domain. The panel generates a DKIM key pair per domain and shows you the exact record to publish under Domain > DNS > DKIM -- there's nothing to configure beyond publishing it.

DMARC: what to do when a check fails

DMARC is a TXT record at _dmarc.yourdomain.com that tells receiving servers what policy to apply to mail that fails SPF or DKIM (quarantine, reject, or do nothing) and, optionally, where to send aggregate reports about mail claiming to be from your domain. It only has teeth once SPF and DKIM are both in place -- set those up first.

Optional: SRV records for client auto-discovery

A domain can also publish SRV records that point at Mila's mail infrastructure by service name rather than requiring every mail client to be configured by hand: an autodiscover record, plus records for IMAP, POP3, and SMTP submission. Clients that support this (see Email client settings) can pick up the right host and port on their own. These are optional -- skip them and enter settings manually if you'd rather not add extra records.

Verifying

The panel's Domain > DNS page re-checks every record for a domain live and flags anything missing or misconfigured by name, so you can fix one record at a time and re-run the check rather than guessing which one is wrong.