├── CONDUCT.md ├── LICENSE.md ├── README.md └── files ├── apple-icloud-mail.txt ├── aws-elb.txt ├── aws-s3.txt ├── aws-ses.txt ├── backblaze-b2.txt ├── blogger.txt ├── clickfunnels.txt ├── github-pages.txt ├── google-app-engine.txt ├── google-workspace.txt ├── improvmx.txt ├── mailgun.txt ├── medium.txt ├── no-email-domain-protection.txt ├── office-365.txt ├── sendgrid.txt ├── shopify.txt ├── smugmug.txt ├── sparkpost.txt ├── tumblr.txt ├── wordpress.txt ├── wp-engine.txt ├── yandex-mail.txt └── zoho-mail.txt /CONDUCT.md: -------------------------------------------------------------------------------- 1 | # Contributor Code of Conduct 2 | 3 | ## Our Pledge 4 | 5 | In the interest of fostering an open and welcoming environment, we as 6 | contributors and maintainers pledge to making participation in our project and 7 | our community a harassment-free experience for everyone, regardless of age, body 8 | size, disability, ethnicity, gender identity and expression, level of experience, 9 | nationality, personal appearance, race, religion, or sexual identity and 10 | orientation. 11 | 12 | ## Our Standards 13 | 14 | Examples of behavior that contributes to creating a positive environment 15 | include: 16 | 17 | * Using welcoming and inclusive language 18 | * Being respectful of differing viewpoints and experiences 19 | * Gracefully accepting constructive criticism 20 | * Focusing on what is best for the community 21 | * Showing empathy towards other community members 22 | 23 | Examples of unacceptable behavior by participants include: 24 | 25 | * The use of sexualized language or imagery and unwelcome sexual attention or 26 | advances 27 | * Trolling, insulting/derogatory comments, and personal or political attacks 28 | * Public or private harassment 29 | * Publishing others' private information, such as a physical or electronic 30 | address, without explicit permission 31 | * Other conduct which could reasonably be considered inappropriate in a 32 | professional setting 33 | 34 | ## Our Responsibilities 35 | 36 | Project maintainers are responsible for clarifying the standards of acceptable 37 | behavior and are expected to take appropriate and fair corrective action in 38 | response to any instances of unacceptable behavior. 39 | 40 | Project maintainers have the right and responsibility to remove, edit, or 41 | reject comments, commits, code, wiki edits, issues, and other contributions 42 | that are not aligned to this Code of Conduct, or to ban temporarily or 43 | permanently any contributor for other behaviors that they deem inappropriate, 44 | threatening, offensive, or harmful. 45 | 46 | ## Scope 47 | 48 | This Code of Conduct applies both within project spaces and in public spaces 49 | when an individual is representing the project or its community. Examples of 50 | representing a project or community include using an official project e-mail 51 | address, posting via an official social media account, or acting as an appointed 52 | representative at an online or offline event. Representation of a project may be 53 | further defined and clarified by project maintainers. 54 | 55 | ## Enforcement 56 | 57 | Instances of abusive, harassing, or otherwise unacceptable behavior may be 58 | reported by contacting the project team at `syed at lukonet.com`. All 59 | complaints will be reviewed and investigated and will result in a response that 60 | is deemed necessary and appropriate to the circumstances. The project team is 61 | obligated to maintain confidentiality with regard to the reporter of an incident. 62 | Further details of specific enforcement policies may be posted separately. 63 | 64 | Project maintainers who do not follow or enforce the Code of Conduct in good 65 | faith may face temporary or permanent repercussions as determined by other 66 | members of the project's leadership. 67 | 68 | ## Attribution 69 | 70 | This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, 71 | available at [http://contributor-covenant.org/version/1/4][version] 72 | 73 | [homepage]: http://contributor-covenant.org 74 | [version]: http://contributor-covenant.org/version/1/4/ -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- 1 | # CC0 1.0 Universal 2 | 3 | > Statement of Purpose 4 | > 5 | > The laws of most jurisdictions throughout the world automatically confer 6 | > exclusive Copyright and Related Rights (defined below) upon the creator and 7 | > subsequent owner(s) (each and all, an "owner") of an original work of 8 | > authorship and/or a database (each, a "Work"). 9 | > 10 | > Certain owners wish to permanently relinquish those rights to a Work for the 11 | > purpose of contributing to a commons of creative, cultural and scientific 12 | > works ("Commons") that the public can reliably and without fear of later 13 | > claims of infringement build upon, modify, incorporate in other works, reuse 14 | > and redistribute as freely as possible in any form whatsoever and for any 15 | > purposes, including without limitation commercial purposes. These owners may 16 | > contribute to the Commons to promote the ideal of a free culture and the 17 | > further production of creative, cultural and scientific works, or to gain 18 | > reputation or greater distribution for their Work in part through the use and 19 | > efforts of others. 20 | > 21 | > For these and/or other purposes and motivations, and without any expectation 22 | > of additional consideration or compensation, the person associating CC0 with a 23 | > Work (the "Affirmer"), to the extent that he or she is an owner of Copyright 24 | > and Related Rights in the Work, voluntarily elects to apply CC0 to the Work 25 | > and publicly distribute the Work under its terms, with knowledge of his or her 26 | > Copyright and Related Rights in the Work and the meaning and intended legal 27 | > effect of CC0 on those rights. 28 | > 29 | > 1. Copyright and Related Rights. A Work made available under CC0 may be 30 | > protected by copyright and related or neighboring rights ("Copyright and 31 | > Related Rights"). Copyright and Related Rights include, but are not limited 32 | > to, the following: 33 | > 34 | > i. the right to reproduce, adapt, distribute, perform, display, communicate, 35 | > and translate a Work; 36 | > 37 | > ii. moral rights retained by the original author(s) and/or performer(s); 38 | > 39 | > iii. publicity and privacy rights pertaining to a person's image or likeness 40 | > depicted in a Work; 41 | > 42 | > iv. rights protecting against unfair competition in regards to a Work, 43 | > subject to the limitations in paragraph 4(a), below; 44 | > 45 | > v. rights protecting the extraction, dissemination, use and reuse of data in 46 | > a Work; 47 | > 48 | > vi. database rights (such as those arising under Directive 96/9/EC of the 49 | > European Parliament and of the Council of 11 March 1996 on the legal 50 | > protection of databases, and under any national implementation thereof, 51 | > including any amended or successor version of such directive); and 52 | > 53 | > vii. other similar, equivalent or corresponding rights throughout the world 54 | > based on applicable law or treaty, and any national implementations thereof. 55 | > 56 | > 2. Waiver. To the greatest extent permitted by, but not in contravention of, 57 | > applicable law, Affirmer hereby overtly, fully, permanently, irrevocably and 58 | > unconditionally waives, abandons, and surrenders all of Affirmer's Copyright 59 | > and Related Rights and associated claims and causes of action, whether now 60 | > known or unknown (including existing as well as future claims and causes of 61 | > action), in the Work (i) in all territories worldwide, (ii) for the maximum 62 | > duration provided by applicable law or treaty (including future time 63 | > extensions), (iii) in any current or future medium and for any number of 64 | > copies, and (iv) for any purpose whatsoever, including without limitation 65 | > commercial, advertising or promotional purposes (the "Waiver"). Affirmer makes 66 | > the Waiver for the benefit of each member of the public at large and to the 67 | > detriment of Affirmer's heirs and successors, fully intending that such Waiver 68 | > shall not be subject to revocation, rescission, cancellation, termination, or 69 | > any other legal or equitable action to disrupt the quiet enjoyment of the Work 70 | > by the public as contemplated by Affirmer's express Statement of Purpose. 71 | > 72 | > 3. Public License Fallback. Should any part of the Waiver for any reason be 73 | > judged legally invalid or ineffective under applicable law, then the Waiver 74 | > shall be preserved to the maximum extent permitted taking into account 75 | > Affirmer's express Statement of Purpose. In addition, to the extent the Waiver 76 | > is so judged Affirmer hereby grants to each affected person a royalty-free, 77 | > non transferable, non sublicensable, non exclusive, irrevocable and 78 | > unconditional license to exercise Affirmer's Copyright and Related Rights in 79 | > the Work (i) in all territories worldwide, (ii) for the maximum duration 80 | > provided by applicable law or treaty (including future time extensions), (iii) 81 | > in any current or future medium and for any number of copies, and (iv) for any 82 | > purpose whatsoever, including without limitation commercial, advertising or 83 | > promotional purposes (the "License"). The License shall be deemed effective as 84 | > of the date CC0 was applied by Affirmer to the Work. Should any part of the 85 | > License for any reason be judged legally invalid or ineffective under 86 | > applicable law, such partial invalidity or ineffectiveness shall not 87 | > invalidate the remainder of the License, and in such case Affirmer hereby 88 | > affirms that he or she will not (i) exercise any of his or her remaining 89 | > Copyright and Related Rights in the Work or (ii) assert any associated claims 90 | > and causes of action with respect to the Work, in either case contrary to 91 | > Affirmer's express Statement of Purpose. 92 | > 93 | > 4. Limitations and Disclaimers. 94 | > 95 | > a. No trademark or patent rights held by Affirmer are waived, abandoned, 96 | > surrendered, licensed or otherwise affected by this document. 97 | > 98 | > b. Affirmer offers the Work as-is and makes no representations or warranties 99 | > of any kind concerning the Work, express, implied, statutory or otherwise, 100 | > including without limitation warranties of title, merchantability, fitness 101 | > for a particular purpose, non infringement, or the absence of latent or 102 | > other defects, accuracy, or the present or absence of errors, whether or not 103 | > discoverable, all to the greatest extent permissible under applicable law. 104 | > 105 | > c. Affirmer disclaims responsibility for clearing rights of other persons 106 | > that may apply to the Work or any use thereof, including without limitation 107 | > any person's Copyright and Related Rights in the Work. Further, Affirmer 108 | > disclaims responsibility for obtaining any necessary consents, permissions 109 | > or other rights required for any use of the Work. 110 | > 111 | > d. Affirmer understands and acknowledges that Creative Commons is not a 112 | > party to this document and has no duty or obligation with respect to this 113 | > CC0 or use of the Work. 114 | > 115 | > For more information, please see -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # DNS Zone Files 2 | 3 | > Ready to import common config zone files for Cloudflare. 4 | 5 | ## Available Zone Files 6 | 7 | - [AWS-ELB](files/aws-elb.txt): To config [AWS Elastic Load Balancing](https://aws.amazon.com/elasticloadbalancing/) service. 8 | - [AWS-S3](files/aws-s3.txt): To config [AWS S3](https://aws.amazon.com/s3/) service. 9 | - [AWS-SES](files/aws-ses.txt): To config [AWS SES](https://aws.amazon.com/ses/) service. 10 | - [Backblaze-B2](files/backblaze-b2.txt): To config [Backblaze B2](https://www.backblaze.com/b2/cloud-storage.html) Cloud Storage. 11 | - [Blogger](files/blogger.txt): To config [Blogger](https://blogger.com/) service. 12 | - [ClickFunnels](files/clickfunnels.txt): To config [ClickFunnels](https://clickfunnels.com/) service. 13 | - [GitHub-Pages](files/github-pages.txt): To config [GitHub Pages](https://pages.github.com/) service. 14 | - [Google-App-Engine](files/google-app-engine.txt): To config [Google App Engine](https://cloud.google.com/appengine/) service. 15 | - [Google Workspace](files/google-workspace.txt): To config [Google Workspace](https://workspace.google.com/) (aka GSuite) service. 16 | - [iCloud+](files/apple-icloud-mail.txt): To config [iCloud+](https://support.apple.com/en-us/HT212514) custom email domain. 17 | - [ImproveMX](files/improvmx.txt): To config [ImproveMX](https://improvmx.com/) service. 18 | - [Mailgun](files/mailgun.txt): To config [Mailgun](https://www.mailgun.com/) service. 19 | - [Medium](files/medium.txt): To config [Medium.com](https://medium.com/) publication. 20 | - [Office 365](files/office-365.txt): To config [Office 365](https://www.office365.com/) service. 21 | - [SendGrid](files/sendgrid.txt): To config [SendGrid](https://sendgrid.com/) service. 22 | - [Shopify](files/shopify.txt): To config [Shopify](https://shopify.com/) service. 23 | - [SmugMug](files/smugmug.txt): To config [SmugMug](https://smugmug.com/) service. 24 | - [SparkPost](files/sparkpost.txt): To config [SparkPost](https://sparkpost.com/) service. 25 | - [Tumblr](files/tumblr.txt): To config [Tumblr](https://tumblr.com/) service. 26 | - [WordPress](files/wordpress.txt): To config [WordPress.com](https://wordpress.com/) custom domain. 27 | - [WP-Engine](files/wp-engine.txt): To config [WP Engine](https://wpengine.com/) service. 28 | - [Yandex-Mail](files/yandex-mail.txt): To config [Yandex.Connect Mail](https://mail.yandex.com/) service. 29 | - [Zoho-Mail](files/zoho-mail.txt): To config [Zoho Mail](https://www.zoho.com/mail/) service. 30 | 31 | ### Other 32 | 33 | - [No Email Domain Protection](files/no-email-domain-protection.txt): To prevent email spoofs on domains that don't send or recieve emails. 34 | 35 | ## Usage 36 | 37 | - Download one of the zone files. 38 | 39 | - Import it inside Cloudflare: Domain > DNS > Advanced > Import DNS records. 40 | 41 | ![how-to-import-records](https://user-images.githubusercontent.com/1915268/135412732-0495c2a5-03ca-4fbf-b84d-49fc3a335125.gif) 42 | 43 | ## Contributing 44 | 45 | PRs are most welcome. Please see [CONDUCT](CONDUCT.md) for details. 46 | 47 | Any issues, please [report here][link-issues] 48 | 49 | ## Credits 50 | 51 | - [Syed Irfaq R.][link-author] 52 | - [All Contributors][link-contributors] 53 | 54 | ## License 55 | 56 | [![CC0](http://i.creativecommons.org/p/zero/1.0/88x31.png)](https://creativecommons.org/publicdomain/zero/1.0/) 57 | 58 | To the extent possible under law, [Syed Irfaq R.][link-author] has waived all copyright and related or neighboring rights to this work. 59 | 60 | Please see [License File](LICENSE.md) for more information. 61 | 62 | [link-author]: https://github.com/irazasyed 63 | [link-issues]: https://github.com/irazasyed/dns-zone-files/issues 64 | [link-contributors]: https://github.com/irazasyed/dns-zone-files/contributors 65 | -------------------------------------------------------------------------------- /files/apple-icloud-mail.txt: -------------------------------------------------------------------------------- 1 | ;; Apple iCloud+ Mail 2 | ;; https://support.apple.com/en-us/HT212514 3 | ;; 4 | ;; Docs: 5 | ;; https://support.apple.com/en-us/HT212524 6 | ;; 7 | ;; Adds the following records: 8 | ;; - MX Records: For inbound emails. 9 | ;; - TXT Records: Domain Verification & SPF. 10 | ;; - CNAME Records: DKIM. 11 | 12 | ;; === MX Records === 13 | @ 1 IN MX 10 mx02.mail.icloud.com. 14 | @ 1 IN MX 10 mx01.mail.icloud.com. 15 | 16 | ;; === TXT Records === 17 | ;; - YOU MUST CHANGE THE SECRET CODE FROM SETUP. 18 | @ 1 IN TXT "v=spf1 include:icloud.com ~all" 19 | @ 1 IN TXT "apple-domain=YOUR-SECRET-CODE" 20 | 21 | ;; === CNAME Records === 22 | ;; - YOU MUST REPLACE "YOURDOMAIN.TLD" WITH YOUR DOMAIN. 23 | sig1._domainkey 1 IN CNAME sig1.dkim.YOURDOMAIN.TLD.at.icloudmailadmin.com. 24 | -------------------------------------------------------------------------------- /files/aws-elb.txt: -------------------------------------------------------------------------------- 1 | ;; AWS ELB 2 | ;; https://aws.amazon.com/elasticloadbalancing/ 3 | ;; 4 | ;; Docs: 5 | ;; http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/using-domain-names-with-elb.html 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Records 9 | 10 | ;; === CNAME Records === 11 | ;; - YOU MUST CHANGE THE VALUE WITH YOUR LOADBALANCER ID AND REGION. 12 | @ 300 IN CNAME my-loadbalancer-1234567890.us-west-2.elb.amazonaws.com. 13 | www 300 IN CNAME my-loadbalancer-1234567890.us-west-2.elb.amazonaws.com. 14 | -------------------------------------------------------------------------------- /files/aws-s3.txt: -------------------------------------------------------------------------------- 1 | ;; AWS S3 2 | ;; https://aws.amazon.com/s3/ 3 | ;; 4 | ;; Docs: 5 | ;; http://docs.aws.amazon.com/AmazonS3/latest/dev/VirtualHosting.html#VirtualHostingCustomURLs 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Record 9 | 10 | ;; === CNAME Record === 11 | ;; - YOU MUST CHANGE HOSTNAME & VALUE WITH APPROPRIATE VALUES. 12 | files 300 IN CNAME files.YOURDOMAIN.COM.s3.amazonaws.com. 13 | -------------------------------------------------------------------------------- /files/aws-ses.txt: -------------------------------------------------------------------------------- 1 | ;; AWS SES - Amazon Simple Email Service 2 | ;; https://aws.amazon.com/ses/ 3 | ;; 4 | ;; Docs: 5 | ;; - MX: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-mx-record.html 6 | ;; - MAIL FROM: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/mail-from.html 7 | ;; - Domain Verification: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/dns-txt-records.html 8 | ;; - DMARC: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-email-authentication-dmarc.html 9 | ;; - SPF: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-email-authentication-spf.html 10 | ;; - DKIM: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-email-authentication-dkim-easy-setup-domain.html 11 | ;; 12 | ;; Adds the following records: 13 | ;; - MX Records: For inbound emails. 14 | ;; - TXT Records: Domain Verification, DMARC, & SPF. 15 | ;; - CNAME Records: DKIM. 16 | 17 | ;; === MX Records === 18 | ;; - YOU MUST CHANGE THE REGION. 19 | @ 300 IN MX 10 inbound-smtp.REPLACE_REGION.amazonaws.com. 20 | 21 | ;; For "MAIL FROM" feature (change as per settings). 22 | amazonses 300 IN MX 10 feedback-smtp.REPLACE_REGION.amazonses.com. 23 | 24 | 25 | ;; === TXT Records === 26 | ;; Domain Verification 27 | ;; - YOU MUST CHANGE THE VERIFICATION STRING. 28 | _amazonses 300 IN TXT "amazonses:VERIFICATION STRING" 29 | 30 | ;; DMARC 31 | ;; - YOU MUST CHANGE THE EMAIL. 32 | _dmarc 300 IN TXT "v=DMARC1;p=quarantine;pct=25;rua=mailto:dmarc@DOMAIN.com" 33 | 34 | ;; SPF 35 | @ 300 IN TXT "v=spf1 include:amazonses.com ~all" 36 | 37 | ;; === CNAME Records === 38 | ;; DKIM 39 | ;; - YOU MUST CHANGE THE TOKENS. 40 | TOKEN_1._domainkey 300 IN CNAME TOKEN_1.dkim.amazonses.com. 41 | TOKEN_2._domainkey 300 IN CNAME TOKEN_2.dkim.amazonses.com. 42 | TOKEN_3._domainkey 300 IN CNAME TOKEN_3.dkim.amazonses.com. 43 | -------------------------------------------------------------------------------- /files/backblaze-b2.txt: -------------------------------------------------------------------------------- 1 | ;; Backblaze B2 Cloud Storage 2 | ;; https://www.backblaze.com/b2/cloud-storage.html 3 | ;; 4 | ;; Docs: 5 | ;; https://help.backblaze.com/hc/en-us/articles/217666928-Creating-a-Vanity-URL-with-B2 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Record 9 | 10 | ;; === CNAME Record === 11 | ;; - YOU MUST UPDATE "f000" with the correct value from your Backblaze B2 panel. 12 | cdn 300 IN CNAME f000.backblazeb2.com. 13 | -------------------------------------------------------------------------------- /files/blogger.txt: -------------------------------------------------------------------------------- 1 | ;; Blogger 2 | ;; https://www.blogger.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://support.google.com/blogger/answer/55374?hl=en 6 | ;; 7 | ;; Adds the following records: 8 | ;; - A Records 9 | ;; - CNAME Record 10 | 11 | ;; === A Records === 12 | @ 300 IN A 216.239.32.21 13 | @ 300 IN A 216.239.34.21 14 | @ 300 IN A 216.239.36.21 15 | @ 300 IN A 216.239.38.21 16 | 17 | ;; === CNAME Record === 18 | www 300 IN CNAME www.YOURDOMAIN.COM.ghs.googlehosted.com. 19 | -------------------------------------------------------------------------------- /files/clickfunnels.txt: -------------------------------------------------------------------------------- 1 | ;; ClickFunnels 2 | ;; https://www.clickfunnels.com/ 3 | ;; 4 | ;; Docs: 5 | ;; http://docs.clickfunnels.com/custom-domains/how-to-set-up-add-or-integrate-a-custom-domain-with-your-clickfunnels-account-funnels-and-pages 6 | ;; https://docs.clickfunnels.com/custom-domains/automatic-custom-domain-and-subdomain-setup 7 | ;; 8 | ;; Adds the following records: 9 | ;; - CNAME Records 10 | 11 | ;; === CNAME Records === 12 | @ 300 IN CNAME target.clickfunnels.com. 13 | www 300 IN CNAME target.clickfunnels.com. 14 | -------------------------------------------------------------------------------- /files/github-pages.txt: -------------------------------------------------------------------------------- 1 | ;; Github Pages 2 | ;; https://pages.github.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://help.github.com/articles/using-a-custom-domain-with-github-pages/ 6 | ;; 7 | ;; Adds the following records: 8 | ;; - A Records 9 | ;; - CNAME Record 10 | 11 | ;; === A Records === 12 | @ 300 IN A 192.30.252.153 13 | @ 300 IN A 192.30.252.154 14 | 15 | ;; === CNAME Record === 16 | www 300 IN CNAME @ 17 | -------------------------------------------------------------------------------- /files/google-app-engine.txt: -------------------------------------------------------------------------------- 1 | ;; Google App Engine 2 | ;; https://cloud.google.com/appengine/ 3 | ;; 4 | ;; Docs: 5 | ;; https://cloud.google.com/appengine/docs/python/console/using-custom-domains-and-ssl 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Records 9 | 10 | ;; === CNAME Records === 11 | @ 300 IN CNAME ghs.googlehosted.com. 12 | www 300 IN CNAME ghs.googlehosted.com. 13 | -------------------------------------------------------------------------------- /files/google-workspace.txt: -------------------------------------------------------------------------------- 1 | ;; Google Workspace 2 | ;; https://workspace.google.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://support.google.com/a/answer/174125 6 | ;; 7 | ;; Adds the following records: 8 | ;; - MX Records: For inbound emails 9 | ;; - TXT Records: Domain Verification, SPF & DKIM 10 | 11 | ;; === MX Records === 12 | @ 300 IN MX 1 aspmx.l.google.com. 13 | @ 300 IN MX 5 alt1.aspmx.l.google.com. 14 | @ 300 IN MX 5 alt2.aspmx.l.google.com. 15 | @ 300 IN MX 10 alt3.aspmx.l.google.com. 16 | @ 300 IN MX 10 alt4.aspmx.l.google.com. 17 | 18 | ;; === TXT Records === 19 | ;; Domain Verification 20 | ;; - YOU MUST UPDATE THIS 21 | @ 300 IN TXT "google-site-verification=YOUR VERIFICATION STRING" 22 | 23 | ;; SPF 24 | @ 300 IN TXT "v=spf1 include:_spf.google.com ~all" 25 | 26 | ;; DKIM 27 | ;; - YOU MUST CHANGE THIS 28 | google._domainkey 300 IN TXT "CHANGE THIS WITH YOUR DKIM YOU CAN GET IT HERE https://admin.google.com/ac/apps/gmail/authenticateemail" 29 | -------------------------------------------------------------------------------- /files/improvmx.txt: -------------------------------------------------------------------------------- 1 | ;; ImprovMX 2 | ;; https://improvmx.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://improvmx.com/guides/cloudflare/ 6 | ;; 7 | ;; Adds the following records: 8 | ;; - MX Records: For inbound emails 9 | ;; - TXT Records: SPF 10 | 11 | ;; === MX Records === 12 | @ 300 IN MX 10 mx1.improvmx.com. 13 | @ 300 IN MX 20 mx2.improvmx.com. 14 | 15 | ;; === TXT Records === 16 | ;; SPF 17 | @ 300 IN TXT "v=spf1 include:spf.improvmx.com ~all" 18 | -------------------------------------------------------------------------------- /files/mailgun.txt: -------------------------------------------------------------------------------- 1 | ;; Mailgun 2 | ;; http://www.mailgun.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://documentation.mailgun.com/quickstart-sending.html#verify-your-domain 6 | ;; 7 | ;; Adds the following records: 8 | ;; - MX Records: For inbound emails 9 | ;; - CNAME Records: For link tracking 10 | ;; - TXT Records: SPF & DKIM 11 | ;; 12 | ;; Make sure to replace TXT record "_domainkey" hostname and value with your DKIM. 13 | 14 | ;; ==== MX Records === 15 | @ 300 IN MX 10 mxa.mailgun.org. 16 | @ 300 IN MX 10 mxb.mailgun.org. 17 | 18 | ;; === CNAME Records === 19 | ;; - YOU MIGHT WANNA CHANGE THIS WITH YOUR TRACKING HOSTNAME 20 | email 300 IN CNAME mailgun.org. 21 | 22 | ;; === TXT Records === 23 | ;; SPF 24 | @ 300 IN TXT "v=spf1 include:mailgun.org ~all" 25 | 26 | ;; DKIM 27 | ;; - YOU MUST CHANGE THIS 28 | mg._domainkey 300 IN TXT "CHANGE THIS WITH YOUR DKIM" 29 | -------------------------------------------------------------------------------- /files/medium.txt: -------------------------------------------------------------------------------- 1 | ;; Medium 2 | ;; https://medium.com 3 | ;; 4 | ;; Docs: 5 | ;; https://help.medium.com/hc/en-us/articles/115003415108-Set-up-your-custom-domain- 6 | ;; 7 | ;; Adds the following records: 8 | ;; - A Records 9 | ;; - CNAME Record 10 | 11 | ;; === A Records === 12 | blog 300 IN A 52.0.16.118 13 | blog 300 IN A 52.1.119.170 14 | blog 300 IN A 52.1.147.205 15 | blog 300 IN A 52.1.173.203 16 | blog 300 IN A 52.4.145.119 17 | blog 300 IN A 52.4.175.111 18 | blog 300 IN A 52.4.225.124 19 | blog 300 IN A 52.4.240.221 20 | blog 300 IN A 52.4.38.70 21 | blog 300 IN A 52.5.181.79 22 | blog 300 IN A 52.6.3.192 23 | blog 300 IN A 52.6.46.142 24 | 25 | ;; === CNAME Record === 26 | ;; - YOU MUST UPDATE "HOST_TOKEN" and "TARGET_TOKEN" with their appropriate values from Medium.com. 27 | HOST_TOKEN_XXXX.blog 300 IN CNAME TARGET_TOKEN_XXXX.comodoca.com. 28 | -------------------------------------------------------------------------------- /files/no-email-domain-protection.txt: -------------------------------------------------------------------------------- 1 | ;; No Email Server Domain Protection 2 | ;; 3 | ;; These records prevent email spoofs on domains that don't send or receive emails. 4 | ;; 5 | ;; Based on: 6 | ;; https://www.gov.uk/guidance/protect-domains-that-dont-send-email 7 | ;; 8 | ;; Adds the following records: 9 | ;; - MX Record: Null MX record for no inbound emails. 10 | ;; - TXT Records: 11 | ;; - an SPF record that says you do not have any sending servers. 12 | ;; - a DMARC record to reject any email from your domain. 13 | ;; - an empty DKIM key record. 14 | 15 | ;; === MX Record === 16 | @ 1 IN MX 0 . 17 | 18 | ;; === TXT Records === 19 | ;; SPF 20 | @ 1 IN TXT "v=spf1 -all" 21 | 22 | ;; DMARC 23 | ;; - YOU MUST UPDATE THIS WITH YOUR EMAIL ADDRESS. 24 | _dmarc 1 IN TXT "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s;fo=1;rua=mailto:dmarc@YOURDOMAIN.com" 25 | 26 | ;; DKIM 27 | *._domainkey 1 IN TXT "v=DKIM1; p=" 28 | -------------------------------------------------------------------------------- /files/office-365.txt: -------------------------------------------------------------------------------- 1 | ;; Office 365 2 | ;; https://www.office365.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://docs.microsoft.com/en-us/office365/admin/dns/create-dns-records-at-cloudflare?view=o365-worldwide 6 | ;; 7 | ;; Adds the following records: 8 | ;; - MX Records: For inbound emails 9 | ;; - TXT Records: Domain Verification, SPF 10 | ;; - CNAME Records: Required CNAME Records 11 | ;; - SRV Records: Required SRV Records 12 | 13 | ;; === MX Records === 14 | ;; - YOU MUST UPDATE THIS 15 | @ 600 IN MX 1 YOUR-DOMAIN-KEY.mail.protection.outlook.com. 16 | 17 | ;; === TXT Records === 18 | ;; Domain Verification 19 | ;; - YOU MUST UPDATE THIS 20 | @ 300 IN TXT "MS=msYOUR VERIFICATION STRING" 21 | 22 | ;; ==== CNAME Records === 23 | autodiscover 1800 IN CNAME autodiscover.outlook.com. 24 | sip 1800 IN CNAME sipdir.online.lync.com. 25 | lyncdiscover 1800 IN CNAME webdir.online.lync.com. 26 | msoid 1800 IN CNAME clientconfig.microsoftonline-p.net. 27 | enterpriseregistration 1800 IN CNAME enterpriseregistration.windows.net. 28 | enterpriseenrollment 1800 IN CNAME enterpriseenrollment.manage.microsoft.com. 29 | 30 | ;; ==== SRV Records === 31 | _sip._tls 1800 IN SRV 100 1 443 sipdir.online.lync.com. 32 | _sipfederationtls._tcp 1800 IN SRV 100 1 5061 sipfed.online.lync.com. 33 | 34 | ;; SPF 35 | @ 1800 IN TXT "v=spf1 include:spf.protection.outlook.com -all" 36 | -------------------------------------------------------------------------------- /files/sendgrid.txt: -------------------------------------------------------------------------------- 1 | ;; SendGrid 2 | ;; https://sendgrid.com/ 3 | ;; 4 | ;; Adds the following records: 5 | ;; - TXT Records: DKIM & SPF 6 | ;; - MX Record 7 | ;; - CNAME Records: For email link tracking & other. 8 | 9 | ;; === CNAME Records === 10 | email 300 IN CNAME sendgrid.net. 11 | 12 | ;; ====== Records for Automated Security ON ====== 13 | ;; 14 | ;; ==== CNAME Records === 15 | subdomain 300 IN CNAME uXXXXXXX.wlXXX.sendgrid.net. 16 | s1.domainkey 300 IN CNAME s1.domainkey.uXXX.wlXXX.sendgrid.net. 17 | s2.domainkey 300 IN CNAME s1.domainkey.uXXX.wlXXX.sendgrid.net. 18 | 19 | ;; ====== Records for Automated Security OFF ====== 20 | ;; Remove ";;" to enable the below records. 21 | ;; Make sure to disable the above records before enabling these. 22 | ;; 23 | ;; ==== MX Record === 24 | ;; m1._domainkey 300 IN MX 10 mx.sendgrid.net. 25 | 26 | ;; === TXT Records === 27 | ;; DKIM 28 | ;; s1.domainkey 300 IN TXT "CHANGE THIS WITH YOUR DKIM" 29 | 30 | ;; SPF 31 | ;; s2.domainkey 300 IN TXT "v=spf1 include:sendgrid.net ~all" 32 | -------------------------------------------------------------------------------- /files/shopify.txt: -------------------------------------------------------------------------------- 1 | ;; Shopify 2 | ;; https://shopify.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://help.shopify.com/manual/domains/connecting-existing-domains/setting-up-your-domain#root-domain 6 | ;; 7 | ;; Adds the following records: 8 | ;; - A Record 9 | ;; - CNAME Record 10 | 11 | ;; === A Record === 12 | @ 300 IN A 23.227.38.32 13 | 14 | ;; === CNAME Record === 15 | www 300 IN CNAME your-store-name.myshopify.com. 16 | -------------------------------------------------------------------------------- /files/smugmug.txt: -------------------------------------------------------------------------------- 1 | ;; SmugMug 2 | ;; https://www.smugmug.com/ 3 | ;; 4 | ;; Docs: 5 | ;; http://help.smugmug.com/customer/portal/articles/93340 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Records 9 | 10 | ;; === CNAME Records === 11 | @ 300 IN CNAME domains.smugmug.com. 12 | www 300 IN CNAME domains.smugmug.com. 13 | -------------------------------------------------------------------------------- /files/sparkpost.txt: -------------------------------------------------------------------------------- 1 | ;; SparkPost 2 | ;; https://www.sparkpost.com/ 3 | ;; 4 | ;; Adds the following records: 5 | ;; - TXT Records: SPF & DKIM 6 | ;; - CNAME Records: For email bounces & link tracking. 7 | ;; 8 | ;; Make sure to replace TXT record "_domainkey" hostname and value with your DKIM. 9 | 10 | ;; === TXT Records === 11 | ;; SPF 12 | @ 300 IN TXT "v=spf1 include:sparkpostmail.com ~all" 13 | 14 | ;; DKIM 15 | ;; - YOU MUST CHANGE THIS 16 | scph000._domainkey 300 IN TXT "CHANGE THIS WITH YOUR DKIM" 17 | 18 | ;; === CNAME Records === 19 | bounces 300 IN CNAME sparkpostmail.com. 20 | email 300 IN CNAME spgo.io. 21 | -------------------------------------------------------------------------------- /files/tumblr.txt: -------------------------------------------------------------------------------- 1 | ;; Tumblr 2 | ;; https://www.tumblr.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://www.tumblr.com/docs/en/blog_management#customdomain 6 | ;; 7 | ;; Adds the following records: 8 | ;; - A Record 9 | ;; - CNAME Record 10 | 11 | ;; === A Record === 12 | @ 300 IN A 66.6.44.4 13 | 14 | ;; === CNAME Record === 15 | www 300 IN CNAME domains.tumblr.com. 16 | -------------------------------------------------------------------------------- /files/wordpress.txt: -------------------------------------------------------------------------------- 1 | ;; WordPress.com 2 | ;; https://wordpress.com/ 3 | ;; 4 | ;; Adds the following records: 5 | ;; - CNAME Records 6 | 7 | ;; === CNAME Records === 8 | ;; - YOU MUST CHANGE "YOUR-SITE-NAME" WITH YOUR WORDPRESS SITE NAME. 9 | @ 300 IN CNAME YOUR-SITE-NAME.wordpress.com. 10 | www 300 IN CNAME YOUR-SITE-NAME.wordpress.com. 11 | -------------------------------------------------------------------------------- /files/wp-engine.txt: -------------------------------------------------------------------------------- 1 | ;; WP Engine 2 | ;; https://wpengine.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://wpengine.com/support/wordpress-best-practice-configuring-dns-for-wp-engine/ 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Records 9 | 10 | ;; === CNAME Records === 11 | ;; - YOU MUST CHANGE "yourinstall" WITH APPROPRIATE VALUE FROM WPEngine. 12 | @ 300 IN CNAME yourinstall.wpengine.com. 13 | www 300 IN CNAME yourinstall.wpengine.com. 14 | -------------------------------------------------------------------------------- /files/yandex-mail.txt: -------------------------------------------------------------------------------- 1 | ;; Yandex Mail 2 | ;; https://mail.yandex.com/ 3 | ;; 4 | ;; Docs: 5 | ;; https://yandex.com/support/connect/dns-editor.html 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Record: Custom Login URL for Yandex Mail (mail.yourdomain.com) 9 | ;; - MX Records: For inbound emails 10 | ;; - TXT Records: SPF & DKIM 11 | 12 | ;; === CNAME Record === 13 | mail 300 IN CNAME domain.mail.yandex.net. 14 | 15 | ;; === MX Records === 16 | @ 300 IN MX 10 mx.yandex.net. 17 | 18 | ;; SPF 19 | @ 300 IN TXT "v=spf1 redirect=_spf.yandex.net" 20 | 21 | ;; DKIM 22 | ;; - YOU MUST CHANGE THIS 23 | mail._domainkey 300 IN TXT "CHANGE THIS WITH YOUR DKIM - Copy the value from Yandex.Mail settings" 24 | -------------------------------------------------------------------------------- /files/zoho-mail.txt: -------------------------------------------------------------------------------- 1 | ;; Zoho Mail 2 | ;; https://www.zoho.com/mail/ 3 | ;; 4 | ;; Docs: 5 | ;; https://www.zoho.com/mail/help/adminconsole/email-hosting-setup.html 6 | ;; 7 | ;; Adds the following records: 8 | ;; - CNAME Record: Custom Login URL for Zoho Mail (mail.yourdomain.com) 9 | ;; - MX Records: For inbound emails 10 | ;; - TXT Records: Domain Verification, SPF, DKIM & DMARC Policy (Optional) 11 | 12 | ;; === CNAME Record === 13 | mail 300 IN CNAME business.zoho.com. 14 | 15 | ;; === MX Records === 16 | @ 300 IN MX 10 mx.zoho.com. 17 | @ 300 IN MX 20 mx2.zoho.com. 18 | @ 300 IN MX 50 mx3.zoho.com. 19 | 20 | ;; === TXT Records === 21 | ;; Domain Verification 22 | ;; - YOU MUST CHANGE THE "********" WITH YOUR ZOHO GENERATED CODE 23 | zb******** 300 IN TXT zmverify.zoho.com 24 | 25 | ;; SPF 26 | @ 300 IN TXT "v=spf1 include:zoho.com ~all" 27 | 28 | ;; DKIM 29 | ;; - YOU MUST CHANGE THIS 30 | zoho._domainkey 300 IN TXT "CHANGE THIS WITH YOUR DKIM" 31 | 32 | ;; DMARC Policy 33 | ;; 34 | ;; Parameter "p": 35 | ;; - Phase 1: Monitor Reports and Traffic: p=none; 36 | ;; 37 | ;; - Phase 2: Quarantine Emails and Analyze: p=quarantine; 38 | ;; -- Parameter "pct": pct=20; - Only 20% of the emails that appear spoofed will be quarantined. 39 | ;; 40 | ;; - Phase 3: Reject Spoofed emails: p=reject; 41 | 42 | ;; Remove ";;" below to enable 43 | ;; _dmarc 300 IN TXT "v=DMARC1; p=none; rua=mailto:admin@yourdomain.com" 44 | --------------------------------------------------------------------------------