Set up DNS at Amazon Route 53

Add the eoinbox DNS records to a public hosted zone in Amazon Route 53.

Menus change. Amazon Route 53 updates its dashboard from time to time, so button and menu names may differ slightly from this guide. Look for the DNS settings of your domain; the records you need are always the same. Your eoinbox dashboard shows the exact values and checks them for you.

Find the hosted zone

Sign in to the AWS Management Console and open Route 53.
Choose Hosted zones and select the public hosted zone for your domain.
Click Create record for each record set. In the wizard, switch to the quick create view if you see a choice.

Make sure the domain actually uses this hosted zone: the NS records of the zone must match the nameservers set at your registrar. If you created a zone more than once, only one of them is live.

Type	Name / host	Value / target	Priority	Status
`TXT`	`@`	`eoinbox-verify=<your token>`Proves you own the domain		Required
`MX`	`@`	`mx1.eoinbox.com`Receiving mail	10	Required
`MX`	`@`	`mx2.eoinbox.com`Receiving mail (backup)	20	Required
`TXT`	`@`	`v=spf1 include:spf.eoinbox.com ~all`SPF, allows us to send for you		Required
`CNAME`	`eo1._domainkey`	`eo1._domainkey.<id>.dkim.eoinbox.com`DKIM signing key 1		Required
`CNAME`	`eo2._domainkey`	`eo2._domainkey.<id>.dkim.eoinbox.com`DKIM signing key 2		Required
`CNAME`	`eo3._domainkey`	`eo3._domainkey.<id>.dkim.eoinbox.com`DKIM signing key 3		Required
`TXT`	`_dmarc`	`v=DMARC1; p=none; rua=mailto:<id>@dmarc.eoinbox.com`DMARC policy and reports		Recommended
`CNAME`	`mta-sts`	`mta-sts.eoinbox.com`MTA-STS policy host		Recommended
`TXT`	`_mta-sts`	`v=STSv1; id=<policy id>`MTA-STS, enforces TLS for incoming mail		Recommended
`TXT`	`_smtp._tls`	`v=TLSRPTv1; rua=mailto:<id>@tlsrpt.eoinbox.com`TLS reporting		Recommended
`CNAME`	`autoconfig`	`autoconfig.eoinbox.com`Automatic setup in mail apps		Optional
`CNAME`	`autodiscover`	`autoconfig.eoinbox.com`Automatic setup in Outlook		Optional
`SRV`	`_imaps._tcp`	`0 1 993 mail.eoinbox.com`IMAP discovery		Optional
`SRV`	`_submissions._tcp`	`0 1 465 mail.eoinbox.com`SMTP discovery		Optional
`SRV`	`_jmap._tcp`	`0 1 443 mail.eoinbox.com`JMAP discovery		Optional

Route 53 specifics

Route 53 works with record sets: one name and type, with one or more values, each on its own line. That changes how a few records are entered.

Record name: leave empty for the domain itself. Otherwise type the name from the table, such as _dmarc or eo1._domainkey.
MX: create one MX record set at the domain with two lines:
```
10 mx1.eoinbox.com
20 mx2.eoinbox.com
```
TXT at the domain itself: the verification record and SPF both live at the domain, so they go into one TXT record set, each value on its own line and in double quotes:
```
"eoinbox-verify=<your token>"
"v=spf1 include:spf.eoinbox.com ~all"
```
If a TXT record set already exists there (for example with Google verification), edit it and add the lines instead of creating a new one.
Other TXT records: also in double quotes, for example "v=DMARC1; p=none; rua=mailto:<id>@dmarc.eoinbox.com".
CNAME: value is the target, for example eo1._domainkey.<id>.dkim.eoinbox.com.
SRV: value in the form priority weight port target, for example 0 1 993 mail.eoinbox.com.
TTL: 300 seconds is a good choice while you set things up.

Remove old mail records

If the domain received mail elsewhere (for example Amazon WorkMail or Google Workspace), edit the existing MX record set and replace its values with ours when you are ready to switch. Merge the SPF value into the existing one rather than adding a second v=spf1 line.