How to point your domain’s DNS to Pax Mail

1. Sign in at paxmail.cc.
   
   
2. Go to Domains ( https://paxmail.cc/domains ).
   
   
3. Click the domain you’re switching.
   
   
4. On the domain page, open the DNS tab. You’ll see a table headed “A list of all DNS fields your domain needs to send/receive mail with Pax.”
   Everything you need to copy is in the Expected Value column.
   
   

1. Sign in to your registrar/host.
   
   
2. Locate the DNS or Zone File editor for the same domain.
   
   

⚠️ Leaving old mail records active can cause delivery failures or security warnings.

1. MX records (all required)
   
   
   • @ → mx1.paxmail.cc priority 10
     
     
   • @ → mx2.paxmail.cc priority 20
     
     
   • @ → mx3.paxmail.cc priority 30
     
     
2. CNAME: Autodiscover
   
   
   • autodiscover → mail.paxmail.cc
      (Optional, but Outlook uses it.)
     
     
3. CNAME: Autoconfig
   
   
   • autoconfig → mail.paxmail.cc
      (Optional, but Thunderbird uses it.)
     
     
4. TXT: SPF
   
   
   • @ → v=spf1 a mx ~all
     
     
5. TXT: DMARC
   
   
   • _dmarc → v=DMARC1;p=quarantine;pct=100
     
     
6. TXT: DKIM
   
   
   • dkim._domainkey → v=DKIM1;k=rsa;t=s;s=email;p=<long RSA key from Pax table>
     
     
7. SRV (optional)
   
   
   • _autodiscover._tcp → 0 1 443 mail.paxmail.cc
      (Skip if your registrar doesn’t support SRV.)
     
     

An aside - Understanding the SRV record format


A single SRV record line shown by Pax looks like:
_autodiscover._tcp.example.com. 0 1 443 mail.paxmail.cc.
Breakdown (in order):

_autodiscover — service label: identifies the feature (autodiscover) the client is looking for.
_tcp — protocol: TCP or UDP.
example.com. — domain that owns the record (trailing dot = absolute FQDN). (replace example.com with your domain)
0 — priority: lower numbers are tried first.
1 — weight: load-balances hosts that share the same priority (0 – 65535).
443 — port the service listens on.
mail.paxmail.cc. — target host the client should connect to (must resolve via A/AAAA or CNAME).

• Some UIs split these fields into separate boxes; others expect a single space-separated string.
  
  
• If your provider requires TTL, place it immediately after the domain segment.
  
  
• The trailing dots (.) after domain and target are not required everywhere; add them only if your registrar’s docs say so.
  
  

• Use @ (or leave the Name/Host field blank) to represent the root of the zone if your DNS editor does so.
  
  
• Keep priorities for MX exactly as listed.
  
  
• A TTL of 300–3600 seconds is ideal if editable.
  
  

• Send yourself a message from an external account (e.g., Gmail) → confirm it lands in your Pax inbox.
  
  
• Reply from your Pax address → confirm SPF, DKIM, and DMARC all pass (Gmail shows this under “Show original”).
  
  

• I can’t add SRV/CNAME records. Skip optional records; mail will still work.
  
  
• My registrar needs trailing dots. If required, enter mx1.paxmail.cc. (dot at the end).
  
  
• Still seeing “Pending” in Pax after 24 h? Check for typos, duplicated records, or hidden legacy MX records.