Custom Web Audits
Run Audit Demo Audit Audit Types Free Tools Pricing What We Analyze 🔒 Login
← All audit checks
Audit Guide · 4 min read
DNS & Email Configuration

DNS & Email Configuration: Why Your Emails Land in Spam (And Your Site Goes Down)

Your marketing emails keep hitting spam folders. Or your site randomly becomes unreachable. Or worse—spammers are sending fake emails that look like they're from your domain. All three problems trace back to the same place: your DNS settings are a mess.

What Is DNS & Email Configuration?

DNS is like a phone book for the internet—it tells browsers and email servers where to find your website and how to handle your emails. The key records you need to know:

Most people set DNS once and forget it exists—until something breaks. Then your site's down, your emails bounce, and you're scrambling to figure out what a "nameserver" is.

Why It Matters

For your visitors: Bad DNS means your site randomly becomes unreachable or loads the wrong site entirely. We've seen businesses point their domain to an old host that no longer exists, making their site disappear for days while DNS propagates.

For search rankings: If your site goes down due to DNS issues, Google can't crawl it. Extended downtime (24+ hours) can tank your rankings. Plus, if email authentication is missing and spammers forge emails from your domain, it damages your domain reputation—which Google tracks.

For your bottom line: Marketing emails with missing SPF/DKIM/DMARC land in spam, wasting your entire email marketing budget. Worse, if customers report your legitimate emails as spam, email providers like Gmail blacklist your domain. One client lost 60% email deliverability because they never configured DMARC—their domain was being used to send phishing emails.

Impact Summary:
User Experience: High
SEO Impact: Medium
Traffic Effect: High
Difficulty to Fix: Technical

Who Should Handle This?

Business Owner: Verify emails deliver; escalate if site becomes unreachable

Marketing Manager: Monitor email deliverability rates; check spam folder placement

Developer/IT Admin: Configure DNS records; set up SPF/DKIM/DMARC; manage migrations

For small businesses, this usually falls on whoever manages your domain registrar (GoDaddy, Namecheap, Cloudflare). If you're switching hosts or email providers, DNS configuration is critical—and it's where most migrations fail.

What to Look For in Your Audit

Green Flags (You're Good)

Yellow Flags (Needs Attention)

Red Flags (Fix Immediately)

Benchmark Reference:
Email Auth: Good = SPF+DKIM+DMARC | Bad = Missing
Deliverability: Good > 95% | Poor < 80%
DNS Health: All records point to active services

Best Practices

Set up the email authentication trio: Configure SPF (lists authorized sending servers), DKIM (cryptographic signature), and DMARC (policy for failed authentication). All three are required for modern email deliverability.

Use separate email providers: Don't use your web host for email. Services like Google Workspace or Microsoft 365 have better deliverability and uptime. Your hosting going down shouldn't kill your email too.

Document your DNS records: Before changing hosts or email providers, screenshot your current DNS settings. One typo can take everything offline for 24-48 hours while DNS propagates.

Set DMARC to quarantine or reject: A DMARC policy of "none" does nothing. Set it to "quarantine" (sends suspicious emails to spam) or "reject" (blocks them entirely) to prevent domain spoofing.

Quick Win: Go to mxtoolbox.com and run an SPF/DKIM/DMARC check on your domain right now. If any show is missing or invalid, you've found why your emails land in spam.

Our Take

In our experience, DNS and email configuration is the most neglected part of website management. Businesses spend thousands on email marketing but never configured DMARC, so half their emails go to spam. We've also seen multiple sites go offline during host migrations because someone fat-fingered an A record and didn't notice for three days.

The most common mistake is assuming your web host automatically handles email authentication. They don't. Even if you're using Google Workspace or Office 365, you need to manually add their SPF, DKIM, and DMARC records to your DNS. Your email provider gives you the records—you have to actually install them.

Here's the hard truth: If you can't confidently edit your own DNS records, you're one accident away from major downtime. Either learn the basics (it's not that hard) or ensure you have a developer/IT person who can access your domain registrar immediately when things break. Because DNS issues don't wait for business hours—your site goes down at 2am on a Saturday, and every hour costs you money.

See exactly what's hurting your website

Start free with our instant SEO tools — or run the all-in-one audit: SEO, speed, accessibility, content, AI visibility & conversion, in one report.

More audit guides

Slow Page IdentificationBacklink Profile AnalysisJavaScript Console ErrorsCWAKOM - Keyword OptimizationTraffic by Source Category