DNS and email health guides
The guides cover email authentication, mail servers, mail in transit, DNS security, and domains, written by the team that builds DNS Autopilot's free check.
Email authentication
From DMARC p=none to p=reject: a safe step-by-step path
Move DMARC from p=none to p=reject without losing legitimate mail: collect reports, fix senders, then quarantine and reject, with clear criteria for each step.
Mail in transitMTA-STS and TLS-RPT: how to require TLS for mail to your domain
Set up MTA-STS and TLS-RPT step by step: the DNS records, the mta-sts.txt policy file, a safe testing-to-enforce rollout, and the mistakes that break mail.
Email authenticationSPF's 10 DNS lookup limit: why SPF breaks and how to fix it
SPF allows 10 DNS lookups. Go over and it returns permerror, which can fail DMARC. See what counts, how to count yours, and how to fix it safely.