Domain Troubleshooting
Use this page when DNS verification does not show OK.
A record fails
Check:
- The host is
mail, notmail.yourdomain.com.yourdomain.com. - The value is the correct public IP.
- Cloudflare proxy is disabled for mail records.
- You are editing the authoritative DNS provider.
MX fails
Check:
- The root host is
@. - The value is
mail.yourdomain.com. - Priority is present.
- Old MX records are not overriding the intended path.
SPF fails
Check:
- There is only one SPF record at the same host.
- The outbound IP is included.
- External providers are merged into the same SPF record.
- The record starts with
v=spf1.
DKIM fails
Check:
- The selector host exactly matches PING8.
- The public key was pasted completely.
- The TXT value was not split into multiple separate records.
- You selected the same DKIM key size shown in PING8.
DMARC fails
Check:
- The host is
_dmarc. - The value starts with
v=DMARC1. - The policy has no invalid spaces, such as
p= quarantine.
PTR fails
PTR is usually configured outside the DNS panel. Contact your IP provider and ask for reverse DNS to match your mail hostname.
After fixing
Wait for DNS propagation and click Records set, verify DNS resolution again.
Symptom map
| Symptom | Likely area | First check |
|---|---|---|
| A record OK, MX fails | MX hostname or old MX conflict | Confirm MX value and priority. |
| SPF fails after adding a second TXT | Duplicate SPF | Merge records into one v=spf1 TXT. |
| DKIM fails only at some resolvers | Propagation or split key | Wait, then confirm one logical TXT value. |
| DMARC fails with a visible record | Syntax | Remove spaces inside tags such as p=none. |
| PTR fails | IP provider | Ask the IP owner to set reverse DNS. |
| Gmail accepts but spam placement is poor | Reputation or alignment | Review SPF, DKIM, DMARC, PTR, content, and volume ramp. |
Safe retry sequence
- Fix one DNS issue at a time.
- Wait for propagation.
- Verify in PING8.
- Send one owned test email.
- Review delivery telemetry before sending a group.