Recommended DNS Records (TLSRPT, MTA-STS)

While MX, SPF, DKIM, and DMARC are mandatory for basic delivery, TrekMail recommends three additional records to tighten security and improve deliverability reporting. Adding these will remove the "Warning" status from your domain health.

Who this is for

• Admins who want the highest security score.
• Users seeing "Active (Warnings)" on their domain.

The Recommended Records

You will find these in the DNS & Health tab under the Recommended section.

1. TLS Reporting (TLSRPT)

Host: _smtp._tls Value: v=TLSRPTv1; rua=mailto:tlsrpt@trekmail.net

This record tells senders like Google and Microsoft where to send reports if they have trouble connecting securely to your domain. TrekMail collects these reports to monitor your deliverability health.

2. MTA-STS (Strict Transport Security)

MTA-STS typically requires setting up a web server to host a policy file. TrekMail handles this for you via a CNAME record. You need two records for this to work:

The Policy ID (TXT)

Host: _mta-sts Value: v=STSv1; id=2025112401 This simply tells the world "I have a policy, and this is the current version ID."

The Policy Host (CNAME)

Host: mta-sts Value: mta-sts.trekmail.net This points the subdomain mta-sts.yourdomain.com to our servers, where we serve the required HTTPS policy file automatically.

Common mistakes & quick fixes

• Symptom: Domain is "Active (Warnings)".
  • Cause: One or more of these recommended records is missing.
  • Fix: Add them to your DNS. They are not strictly required for mail flow, but they help reputation.
• Symptom: CNAME Conflict on mta-sts.
  • Cause: You might have an old CNAME or A record for mta-sts.
  • Fix: Delete the old record and replace it with the one pointing to trekmail.net.
• Symptom: TXT Hostname confusion.
  • Tip: Ensure your DNS provider doesn't require the full domain. Usually _mta-sts is enough. If you type _mta-sts.example.com, some providers might create _mta-sts.example.com.example.com.

See also

• Required DNS Records
• Adding a Domain