DNS & Email Deliverability
Resolving issues with custom domain propagation, SSL certificate generation, and outbound email spam filtering.
“Always run the Deliverability Audit from your dashboard before making changes. It queries public resolvers (8.8.8.8) to show exactly what the internet sees.”
Domain Stuck in 'PENDING' Status
If you added a custom domain but the dashboard refuses to switch to VERIFIED:
Proxy Status Enabled
If using Cloudflare for your DNS, ensure the CNAME pointing to ingress.gnapex.com is set to 'DNS Only' (Grey Cloud). If it is proxied (Orange Cloud), our verification engine cannot read the cryptographic challenge.
Global Propagation Latency
DNS changes can take up to 24 hours to propagate globally. Wait 15 minutes and click 'Verify DNS' again.
Emails Going to Spam (DKIM / SPF failures)
If your outbound emails are landing in recipient spam folders, run the Deliverability Audit in the dashboard. Ensure the following criteria are met:
| Parameter | Type | Requirement | Description |
|---|---|---|---|
| SPF Alignment | Missing TXT Record | Optional | Ensure your domain root contains exactly one SPF record ending with `include:_spf.gnapex.com ~all`. |
| DKIM Signature | CNAME Disconnect | Optional | Verify all 3 Easy-DKIM CNAME records generated by GN-Apex are pasted exactly as provided into your registrar. |
| DMARC Policy | Missing Rule | Optional | Without a _dmarc TXT record (e.g. p=quarantine), Google and Yahoo will heavily penalize your sender reputation. |
| Domain Warmup | Volume Spike | Optional | Did you blast 5,000 emails on a brand new domain? Use the Warmup Engine to ramp up volume slowly. |
Not Receiving Inbound Emails
MX records. You must delete any old MX records (e.g., Google Workspace or cPanel) and ensure mx.gnapex.com is the only record with priority 10.