This guide explains how solving a link problem Site Creator / Domain name(s) if you do not succeed in connect Site Creator to a domain.

Solve a problem with the domain name

Here are the situations and solutions if you fail to perform the desired operation with Site Creator:

This guide explains how to add or modify one or several CAA type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Introduction

• A CAA record allows you to specify a certification authority authorized to issue certificates for a domain.

Add a CAA

Refer to this other guide to manage this type of record in a DNS zone.

Adding CAA to validate a Sectigo SSL certificate

In the case of a Sectigo SSL certificate validation, follow the generic guide above but enter the following data specifically:

• Select "Issue for Certification Authority".
• Enter the flag: 0.
• Specify sectigo.com:

This guide explains how to add or modify a DKIM record in a DNS zone (domain name) managed on the Manager Infomaniak.

Preamble

• The DKIM (Domain Keys Identified Mail) record type is a protocol that allows emails to be signed when they are sent and ensures the optimal operation of your Infomaniak messaging.
• This ensures that the content of emails is not altered during transit and that they genuinely originate from the sender's domain. This standard thus prevents spammers from impersonating legitimate entities.
• DKIM will fail if it detects that a message has been altered and unauthorized changes have been made to the Fromof the message.
• The DKIM standard is enabled for all Infomaniak clients with a Mail Service whose domain name has its DNS zone managed at Infomaniak. All emails sent from Mail or your chosen email software/client are therefore automatically signed.
• DKIM is not available for subdomains.

Check the DKIM record

The Global Security tool allows you to easily check and correct certain problematic records.

And when your domain name is managed elsewhere, you will find the DKIM record to add in the DNS zone:

Manually modify the DNS zone (not recommended)

Refer to this other guide to manage this type of record in a DNS zone.

Add multiple DKIM

You can have multiple DKIM records on your domain without limit, unlike DMARC or SPF, as long as your DNS host allows it.

If you use several third-party email providers, for example the ERP Odoo, it is necessary to add a DKIM for Odoo in addition to that of Infomaniak.

Use unique DKIM selectors to avoid conflicts with existing records.

This guide explains how to add or modify one or more CNAME and DNAME type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• The CNAME record type allows pointing a subdomain to a website address.
  • This is the method generally used to operate the www subdomain with your site, or to redirect a subdomain to a folder on the web server where your website is hosted.
• The DNAME record type for «delegation name» is particularly useful when reorganizing domains or for smooth transitions of part of your infrastructure to another, while preserving the hierarchical structure of subdomains.
  • A DNAME creates an alias for an entire domain and all its subdomains.
• Unlike a CNAME which applies to a single specific host name, a DNAME automatically redirects all subdomains. Example:
  • A DNAME for abc.site1.com pointing to site2.com will automatically link xyz.abc.site1.com to xyz.site2.com, new.login.abc.site1.com to new.login.site2.com, and so on.
• ⚠ A DNAME record cannot be used at the root level of a domain (such as site1.com directly). It is generally used on a subdomain. If you want to redirect the main domain itself, you will need to use other types of records such as an A, AAAA or CNAME (with some restrictions for the latter).
   

Modify the DNS zone

Refer to this other guide to manage this type of record in a DNS zone.

This guide explains how to add or modify one or more TXT records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Introduction

• The TXT record type allows you to insert readable text into the DNS zone of a domain name.
• This is the method generally used to help prevent spam and to verify domain ownership (Google may ask you to do this before using some of their services).

Modify the DNS zone

Refer to this other guide to manage this type of record in a DNS zone.

This guide explains how to display the IP address of a site on your Web Hosting.

Preamble

• The IPv4 address is generally the same for each site on the hosting (unless you have acquired a dedicated IP).

Display the IP address of your site

The IP address is specified on the hosting management page (Starter or containing multiple sites):

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Then click on the chevron ‍ to expand the Information section of this hosting.
4. The IPv4 address is displayed on the page:
   
5. The IPv6 address is also displayed in the case of paid hosting:
   

This guide explains how to add or modify an MX record in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Introduction

• The "MX" record type allows you to specify which provider should handle the email (= the target).
• You should only modify this type of record if you have a specific configuration to implement (e.g., domain name at Infomaniak and email service with an external provider).
• There can be several MX records (so that a second email service takes over in case of failure of the first) and in this case a number designates the priority of each of them (the smaller the number, the higher the priority).

MX for Infomaniak mail

Infomaniak automatically provides the MX record needed to link your domain name and your email, if both are managed within the same organization at the Manager level.

If your configuration requires you to add an MX record yourself to direct mail traffic to Infomaniak, then specify the following MX:

mta-gw.infomaniak.ch

with the priority 5.

On the interface of some providers like Gandi, it is necessary to add a dot at the end of the MX record:

mta-gw.infomaniak.ch.

A correct SPF record is also required for proper functioning of Infomaniak's email service.

Modify the DNS zone

Refer to this other guide to manage this type of record in a DNS zone.

Learn more

• Link a domain to an Infomaniak Mail Service
• Specify the Infomaniak MX with a third-party web provider

This guide details the monetization of domain names, generally carried out via domain parking while keeping the reseller's details hidden.

Domain parking

Domain parking is a technique that involves registering a domain name without immediately using it for a website.

Instead, the domain name is "parked" and typically displays a parking page with advertisements generated by an affiliate network.

The owner of the "parked" domain name can then earn money through these ads as a passive income source.

What if you are the visitor?

Be vigilant: some domain parking pages may resemble legitimate websites, which can cause confusion for users trying to access a particular website, and others may be infected with malware, which can be dangerous for users' cybersecurity.

This guide explains how to implement a DMARC policy for your email hosted by Infomaniak, an essential element to prevent potential delivery issues.

Preamble

• DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an essential tool for enhancing email security and protecting your domain against fraud by verifying the authenticity of outgoing emails (through authentication mechanisms such as SPF and DKIM) and allowing you to define policies for handling unauthenticated emails.
• DMARC is used to specify to other mail providers what they should do when they reject an email due to incorrect or missing SPF or DKIM.
• To do this, domain owners can define DMARC policies, such as "reject", "quarantine" or "none", to specify how these "suspicious" emails should be handled. Example:
  1. An email is sent from anna@domain.xyz to victor@yahoogle.abc.
  2. The Mail Service of domain.xyz contains a DMARC configuration of type reject at 100%.
  3. The Mail Service of yahoogle.abc is well secured and proceeds with the SPF/DKIM/DMARC analysis of the mail arriving from domain.xyz.
  4. If this analysis results in a failure of the SPF or DKIM, then the Mail Service of yahoogle.abc will reject (and therefore delete) the message.
  5. It will send a report by email if a report address is specified in the DMARC of domain.xyz.
     • These DMARC reports generated help you maintain and improve the security of your domain; you will thus be able to identify any authentication errors and phishing attempts using your domain.

DMARC policy and acceptance percentage

For the instructions that can be given to recipient servers when a suspicious message is detected, 3 policies (p = policy) exist and can be refined with a percentage (pct):

none

With "p=none", no email is rejected or quarantined based on DMARC verification. However, the percentage of reception can be used to collect data on unauthenticated emails, indicating how many of these emails should be subject to the DMARC policy. For example, "p=none; pct=10" means that 10% of unauthenticated emails will be subject to the DMARC policy, while the remaining 90% will be accepted.

quarantine

With "p=quarantine", unauthenticated emails may be placed in quarantine, but the reception percentage determines the proportion actually subject to this policy. For example, "p=quarantine; pct=50" means that 50% of unauthenticated emails will be placed in quarantine, while the remaining 50% will be accepted.

reject

With "p=reject", unauthenticated emails are rejected. The reception percentage determines the proportion of unauthenticated emails that will be effectively rejected. For example "p=reject; pct=20" means that 20% of unauthenticated emails will be rejected, while the remaining 80% will be accepted.

Create a DMARC record

There are 2 ways to manage DMARC.

If you have a Mail Service with Infomaniak, the easiest way is to go to the Global Security tool to manage your DMARC security policy and reports:

But since the DMARC record is a type of DNS record, typically of type TXT, you can also manage it from the DNS zone of the domain name:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on DNS Zone in the left sidebar.
4. Click the button to add a record:
   
5. Click on the radio button DMARC to add a record.
6. Click on the Next button:
   
7. Leave (or add if necessary) the value _dmarc in the Source field.

8. The Target field must contain the parameters you wish to use, separated by ;:

   Tag Name	But	Example
   v	Protocol version	v=DMARC1
   pct	Percentage of messages subjected to filtering	pct=20
   ruf	Report URI for forensic reports	ruf=mailto:authfail@domain.xyz
   rua	Aggregate report URI	rua=mailto:aggrep@domain.xyz
   p	Policy for the organizational domain	p=quarantine
   sp	Policy for the subdomains of the organizational domain	sp=reject
   adkim	Alignment mode for DKIM	adkim=s
   aspf	Alignment mode for SPF	aspf=r

   This can result in for example v=DMARC1;p=reject;pct=100;rua=mailto:postmaster@dmarcdomain.com (source)

9. Leave the default value for the TTL.
10. Click on the Save: button
    

This guide explains how to use the Newsletter tool with an external domain name (not managed at Infomaniak).

Prerequisites

• The domain name must belong to you.
• Synonym domains and their primary domain cannot be used to send newsletters.
  • It is possible to set up your synonyms as aliases.

Link an external domain

To access the management of Newsletter sending domains:

1. Click here to access your product management on the Infomaniak Manager (need help?).
2. If you already have a Newsletter, click on Add a domain:
   
   • Otherwise, click on Start for free:
     
3. Select Other domain from the dropdown menu before entering (or enter directly) the domain name with which you want to send newsletters:
   
4. Click the blue Approve button.
5. Add the TXT / CNAME / DKIM records that you will receive by email and that are visible on the interface to your registrar by clicking the button: