Three places to check email DNS
Mail routing and authentication use different records. Query the right name before comparing the answers.
MX and SPF: receiving versus sending →
Do not infer sending permission from MX or treat TXT inspection as a delivery test.
Why DKIM and DMARC may not appear at the apex →
Email authentication records typically use specific names under the domain.
Record type reference
- A / AAAA
- IPv4 and IPv6 addresses associated with a name.
- CNAME
- An alias relationship between one name and another.
- MX
- Incoming mail servers and their preference values.
- TXT
- Public text, such as SPF, verification values or DKIM data.
- NS / SOA
- Nameservers and essential zone information.
- SRV
- Service target, port, priority and weight. Enter the full service name.
- PTR
- Reverse mappings. Enter the corresponding in-addr.arpa or ip6.arpa name.
- CAA
- Public statements about certificate issuance authorization.
Scope of a lookup
All types covers common record types for the name you enter. It does not enumerate every subdomain or perform zone transfers, port scans or global propagation tests. Answers come from one recursive DNS service and may reflect its cache.