Ok, i've secured my server with Lets Encrypt SSL Lets say: https: //my.server.com:8080 I have copied that SSL cert for Postfix and other services. All working great! I have a client site, lets say: https: //client.server.com It connects fine and also works great! Now, for email...... The client is now set to incoming and outgoing mail server of: my.server.com Works great, certificate accepted with no issues. But... where DNS wise do i put the SPF Record for client.server.com? Also, what should it contain? Before i set up the SSL for the server, i had set up the clients email with mail .client. com and through its own DNS set the MX and SPF record. (Again, it was working fine albeit with manually activated SSL certificate) v=spf1 mx a ~all It also had its own working default._domainkey, wher do i now need to amend that? I ask these questions as mail .client. com is no longer the incoming / outgoing server. Help / guidance is welcomed! Thanks
Hi, To have a secured connection via SSL to your server, your client has to use : my.server.com for SMTP / POP / IMAP. DNS MX input for : client.server.com have to be set to : my.server.com IP
Maybe I misunderstand that statement, but do not set your MX record to an IP address, which is invalid, set it to a hostname which itself has an A address (not CNAME).