Body

Here you have a list of several DNS sections

Machines: Machines addresses in the current domain (name associated to an IP - machine). e.g.:
```
         www    ->  192.168.2.1
```
Aliases^7.10: Alias registration for domain machines (this option is only available for a forward name resolution zone) e.g.:
```
         www2   ->   www
```
Name Servers registration of FQDN addresses of machines that serve this domain (DNS). e.g.:
```
    domain.com  ->  www.domain.com
```
Mail Servers e-mail server registration for this domain. You can have several registrations each with different internal positive values. The values indicate which registration to use first. The registration with the lowest value is always the first one to be used. The value to be introduced here must always be the e-mail server FQDN, no matter if it is a server of the domain itself, like .domain.com., or an internet server, like mail.saturno.com.. This option is only available for a forward name resolution zone. For example:
```
    20 mail.saturno.com 
    10 ipbrick.domain.com
```
VoIP Servers registration of VoIP servers for this domain (SRV record). The value to be introduced here is the FQDN of the VoIP server, like for example voip.domain.com. This option is only available for a forward name resolution zone. For example:
```
    voip.domain.com
```
Instant Message Server: Full address for the instant message service DNS record (SRV record). Always im.domain.com;
Valid records for sending mail (SPF): In this field we can use the SPF in order to specify what records are valid for mail sending. So this configuration here will be the IPBrick's mail server answer to the external mail servers that are using the SPF protection. The configuration can be done at Basic Options (Figure 7.23):
- Registered mail servers: The domain MX records can be valid (pass), invalid (fail) or undefined (not present at TXT record)
- Registered machines: The domain A records can be valid, invalid or undefined;
- Domains: Other domains that are valid (corresponding to the senders address);
- Networks: Valid sender networks;
All the rest is invalidated (mechanism -all).

Figure 7.23: Support Services - DNS - SPF basic options

After the configuration from the Basic Options, going to Advanced Options will present the TXT record. There it's possible to edit directly the TXT record, so other specific SPF mechanisms and qualifiers can be used (Figure 7.24).

Figure 7.24: Support Services - DNS - SPF advanced options

TXT record example:
```
    domain.com.    IN     TXT    "v=spf1 a mx -all"
```
In that configuration, if someone in Internet asks for the mail authenticity, only the mail sended by the domain MX and A records will be valid. The rest will be invalidated.

**Figure 7.25:** Support Services - DNS - Zone Management 1/2

**Figure 7.26:** Support Services - DNS - Zone Management 2/2

**Figure 7.27:** Support Services - DNS - Reverse zone

Footnotes

... Aliases^7.10: Alternative names

iPortalMais