{"id":139,"date":"2026-07-10T01:19:39","date_gmt":"2026-07-10T01:19:39","guid":{"rendered":"https:\/\/mailjuke.com\/blog\/dns-preflight-checklist-business-email\/"},"modified":"2026-07-10T01:19:39","modified_gmt":"2026-07-10T01:19:39","slug":"dns-preflight-checklist-business-email","status":"publish","type":"post","link":"https:\/\/mailjuke.com\/blog\/dns-preflight-checklist-business-email\/","title":{"rendered":"DNS Pre-Flight Checklist Before You Send Your First Business Email"},"content":{"rendered":"

Most \u201cGmail is broken\u201d tickets are DNS tickets. Run this checklist before anyone sends from a new Google Workspace domain.<\/p>\n

The checklist<\/h2>\n
    \n
  1. Domain verified<\/strong> in Google Admin.<\/li>\n
  2. MX<\/strong> points only to Google (priorities correct; old host removed).<\/li>\n
  3. SPF<\/strong> \u2014 single TXT, includes _spf.google.com<\/code>, lookup count \u2264 10.<\/li>\n
  4. DKIM<\/strong> \u2014 key published; Admin shows authenticating.<\/li>\n
  5. DMARC<\/strong> \u2014 at least p=none<\/code> with a real rua<\/code> mailbox you monitor.<\/li>\n
  6. TTL<\/strong> \u2014 lowered before cutover, raised after stable.<\/li>\n
  7. CAA \/ extras<\/strong> \u2014 not blocking needed certificates if you terminate TLS elsewhere.<\/li>\n
  8. Test headers<\/strong> \u2014 SPF\/DKIM\/DMARC PASS to Gmail and Outlook.<\/li>\n<\/ol>\n

    Registrar pitfalls<\/h2>\n
      \n
    • Some panels append the domain to hostnames twice (_dmarc.domain.com.domain.com<\/code>).<\/li>\n
    • Flattening SPF incorrectly can remove Google\u2019s include.<\/li>\n
    • \u201cEmail forwarding\u201d features at the registrar can silently add MX you did not want.<\/li>\n<\/ul>\n

      Ship it with confidence<\/h2>\n

      If you want the checklist executed for you, MailJuke\u2019s setup flow is built around domain + Workspace + authentication \u2014 so your first business email is verified, not experimental.<\/p>\n","protected":false},"excerpt":{"rendered":"

      A copy-paste DNS checklist: MX, SPF, DKIM, DMARC, TTL, and common registrar pitfalls \u2014 so your first Workspace messages are authenticated on day one.<\/p>\n","protected":false},"author":1,"featured_media":140,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"saved_in_kubio":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[9,11,12],"tags":[],"class_list":["post-139","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-domain","category-email-security","category-guide"],"_links":{"self":[{"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/posts\/139","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/comments?post=139"}],"version-history":[{"count":0,"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/posts\/139\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/media\/140"}],"wp:attachment":[{"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/media?parent=139"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/categories?post=139"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mailjuke.com\/blog\/wp-json\/wp\/v2\/tags?post=139"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}