DNS Configuration

Prerequisites: Complete Email Sender Setup before configuring DNS records. After verifying your sender in Lyara, you'll receive the specific DNS records that need to be added to your domain.

Why DNS Records Matter

To ensure reliable email delivery and prevent spam filtering, you must configure DNS records for your domain. These records authenticate that Lyara (via Postmark) is authorized to send emails on your behalf, significantly improving deliverability rates and preventing your emails from being marked as spam.

How You Get Your DNS Records

DNS Records
  1. 1. Complete email sender verification in Lyara
  2. 2. Lyara will display the specific DNS records for your domain
  3. 3. Copy these records and add them to your domain's DNS settings
  4. 4. Records typically take 24-48 hours to propagate
DNS Records

SPF (Sender Policy Framework)

CRITICAL

SPF records are essential - they tell receiving email servers that Lyara is authorized to send emails on behalf of your domain. Without SPF, your emails will likely go to spam.

SPF Record Setup

Lyara will provide you with the exact SPF record for your domain. It will typically look like this:

Record Type: TXT
Host/Name: @ (or your domain name)
Value: v=spf1 include:spf.mtasv.net ~all

If You Already Have SPF Records

If your domain already has an SPF record, you'll need to modify it to include Postmark. Add include:spf.mtasv.net to your existing record:

v=spf1 include:_spf.google.com include:spf.mtasv.net ~all

Example showing Google Workspace + Lyara

DKIM (DomainKeys Identified Mail)

CRITICAL

DKIM adds a digital signature to your emails, allowing receiving servers to verify that emails haven't been tampered with and actually came from your domain. This is essential for inbox delivery.

DKIM Record Setup

After setting up your sender in Lyara, you'll receive a unique DKIM record for your domain. The record will look like this:

Record Type: TXT
Host/Name: [unique-selector]._domainkey.yourdomain.com
Value: k=rsa; p=[unique-public-key]

Important: Use the Exact Record from Lyara

Lyara will provide you with the exact DKIM record for your domain, including the unique selector and public key. Copy this record exactly as provided - the values are specific to your domain.

DMARC (Domain-based Message Authentication)

IMPORTANT

DMARC builds on SPF and DKIM to give you control over what happens when emails fail authentication. While not as critical as SPF/DKIM for immediate delivery, it protects against spoofing and improves long-term deliverability.

Start with Monitoring Mode

Begin with a monitoring-only policy to avoid blocking legitimate emails. Use your own email for reports:

Record Type: TXT
Host/Name: _dmarc.yourdomain.com
Value: v=DMARC1; p=none; rua=mailto:your-email@yourdomain.com

DMARC Policy Levels (Advanced)

After monitoring for a few weeks, you can gradually increase protection:

  • • p=none: Monitor only - safe to start with
  • • p=quarantine: Failed emails go to spam (advanced)
  • • p=reject: Failed emails are rejected (advanced)

Recommendation

For most users, starting with p=none or not setting it at all is perfectly fine. The primary benefit comes from having DMARC present, which signals to email providers that you care about authentication.

Verification & Testing

Check DNS Propagation

  • • DNS changes can take 24-48 hours to fully propagate
  • • Use online DNS lookup tools to verify your records
  • • Check from multiple locations worldwide

Test Email Authentication

  • • Send test emails through your Lyara automations

Success Indicators

When properly configured, you should see 95%+ delivery rates, fewer spam complaints, and improved email engagement. Your Email Templates and Email Automation will now have optimal deliverability.