I have about 100 domains parked on top of a main domain. All emails for these parked domains forward to the parent domain (like forwarding emails from [email protected] to [email protected]). My question is, do I need to keep the DNS records for mail (like `mail A 123.45.67.89` and `foo.com MX mail.foo.com`) for these parked domains? Are they required for email forwarding to the parent, or do they pose a security risk by being potential targets for hackers?
4 Answers
You can definitely remove the MX and mail A records from parked domains. Just keep everything consolidated on the main domain. It simplifies things and email forwarding will still work perfectly fine!
It's a good idea to keep the SPF records for your parked domains. This helps prevent spammers from sending emails using those domains. Although I bet not a lot of people actually take the time to set it up. By the way, consider adding DKIM too – it's another layer of protection!
True! Setting up DKIM can add extra security against email spoofing. It's worth the effort!
If you don't have an MX record, emails simply can't be sent to users at that domain. So technically, keeping them might be necessary if you want to ensure delivery without issues.
Actually, if there's no MX record, the A record can be used instead. The MX record is mainly for directing email elsewhere if needed.
I think it's safer to keep the records. Some systems, like Laravel, may fail DNS validation without them, causing issues with emails not getting sent out.
I'm curious, how do I set up SPF to block outgoing emails while allowing incoming ones?