PAFworks Guides All guides
Administration · Mail

Use your own mail domain

Have your organisation’s mail arrive in PAFworks and leave from it under your own domain name. Add the domain, publish the DNS records PAFworks lists for it, then give everyone their address — and add shared mailboxes, distribution lists and a scan-to-mail address where you need them.

What you need

  • A PAFworks administrator account: Admin appears in the left bar. Everything on this page is done there.
  • A domain name, such as acme.example, and access to its DNS settings at your registrar or DNS host.
  • The accounts of your colleagues, created in Admin › Users: see Set up your organisation.

Step 1 — Add the domain

  1. Click Admin in the left bar, then Allowed domains under Mail. Type your domain and click Add.

    The Allowed domains page of the administration, with a new domain typed in
  2. The domain appears as Not verified, followed by its DNS records: the list of what to publish, with the type, the name and the value of each record, and a line on what it is for.

    The new domain, not verified yet, with the DNS records to publish

Until the domain is verified, it receives no mail and no address can be given on it. Publish at least the first record of the list straight away.

Step 2 — Publish the DNS records

At your registrar or DNS host, create each record exactly as PAFworks lists it: same type, same name, same value. The values are those of your PAFworks service — copy them from your page; the picture above shows examples. In the order of the list:

RecordWhat it does
Proof of ownership
TXT
Its name starts with _pafworks_verify, its value is a token of this domain’s own. Proves that the domain is yours. It may be removed once the domain is verified.
Incoming mail
MX
Brings the domain’s mail to PAFworks. If the domain has other MX records, remove them: a sender may pick any of them.
SPF
TXT
Tells the servers receiving your messages that PAFworks may send as your domain. A domain holds one SPF record: if yours already has one, add the include: part of the value to it rather than publishing a second one.
DKIM
CNAME
Lets them check the signature PAFworks adds to your messages. A CNAME, not a copy of the key: the key can be replaced without anything to change on your side.
DMARC
TXT
Tells them what to do with a message failing the two checks above. p=none asks for no action yet; move to p=quarantine once every service sending as your domain passes.
autoconfig
CNAME
Optional. Thunderbird and Evolution fetch their settings here: whoever adds their address types it and their password, nothing else.
autodiscover
CNAME
Optional. The same settings, for mail apps that use Microsoft’s Autodiscover.

The name field of your DNS host. Many DNS hosts add your domain to the name by themselves: there, type only what comes before it — _dmarc rather than _dmarc.acme.example.

Outlook. Do not count on the autodiscover record to set up Outlook: for an IMAP account, Outlook asks Microsoft’s own service rather than your domain, and may still ask for the server settings. Your colleagues find them in PAFworks under Help › Get your mail in your mail app — see Mail, calendar and contacts.

Depending on your PAFworks service, the list may hold other optional records, such as SRV and TXT records under _caldavs._tcp and _carddavs._tcp: they let calendar and contacts apps find PAFworks from an address alone.

Step 3 — Check the records

Once the records are published, click Check on the domain. PAFworks asks your domain’s own name servers rather than a cache, so a record is seen as soon as your DNS host publishes it. Each record then gets a mark, and the domain a status.

A checked domain: three records in place, the DKIM record to fix, an optional record missing
StatusMeaning
Not verifiedThe record proving the domain is yours has not been found yet. The domain receives no mail.
Not checkedThe domain is verified; its other records have not been checked yet.
DNS correctEvery required record is in place. The list folds away: click DNS records to see it again.
DNS incompleteA required record is missing or wrong: the line under it says what to fix.

Only the proof of ownership is required. PAFworks never refuses mail because another record is missing. But without the MX record, your domain’s mail does not reach PAFworks; and without SPF, DKIM and DMARC, the servers receiving your messages cannot tell that they really come from you.

Give everyone an address

A colleague uses Mail once they hold an address on one of your verified domains.

  1. In Admin, click Mailboxes. Under Mail addresses, type the address and choose its owner in the list: an account by its user name, a shared mailbox marked (shared) or a distribution list marked (distribution list). Tick Primary if it should be the address its owner sends from, then click Add.

    The Mail addresses panel: a new alias typed in for alice, and every address of the organisation with its owner
  2. The list shows every address of your organisation and its owner. The primary one is what its owner’s mail is sent from; Make primary changes it, Delete removes an address.

Shared mailboxes

A shared mailbox is an address with its own folders, read by several colleagues at once: contact@, support@, accounting@.

  1. In Admin › Mailboxes, under Shared mailboxes, type its name and its address, then click Create. The new mailbox opens, still without members.

  2. Under Members, choose a colleague in Add a user…, their right, and click Add. Each member’s right can be changed in their line; Remove takes them out. Manage opens a mailbox again later, to rename it or change its address and members.

    The Contact shared mailbox open in the administration, with three members and their rights
RightWhat the member can do
Read onlyRead the messages. They cannot move or delete them, nor send from the mailbox’s address.
Read & WriteAlso file and delete messages, and answer from the mailbox’s address.
AdminThe same as Read & Write in Mail.

Members find the mailbox in Mail, under Team share: see Shared mailboxes in the mail guide. A mailbox without members still receives mail, but nobody can read it.

From the Mail app. Administrators also see a + next to Team share in Mail: New shared mailbox creates one with you as its Admin member.

Distribution lists

A distribution list is an address that delivers each message to the inbox of several colleagues — sales@, team@. Unlike a shared mailbox there is no common folder: every member gets their own copy, sorted by their own rules, and can answer from the list’s address so that the reply keeps reaching all of them.

  1. In Admin › Mailboxes, under Distribution lists, type the name and the address of the list, then click Create.

    Creating the Sales distribution list with the address sales@example.com

    If the address already belongs to a colleague, PAFworks offers to Move it to the list: they become a member and keep receiving its mail.

  2. The list opens: add its members with Add a user… and Add.

    The Sales list with three members

Scan to a folder

A Mail to folder address files the attachments of every message it receives into a folder of Files: the address to give the scan-to-mail function of a copier.

  1. In Admin › Mailboxes, under Mail to folder, type a name and the address. Click Choose a folder…, open the folder — any shared folder, or the files of any account — and click Choose this folder.

    Choosing a folder: the folders of alice, with To sort to open
  2. In the last list, choose Keep no copy of the message, or keep a copy in the inbox of an account or of a shared mailbox. Click Create.

    The Mail to folder form filled in: name, address, folder and copy
  3. Set the copier to send its scans to the new address. Each address shows its folder and how many files it has received.

    Two mail-to-folder addresses, one filing into an automatic folder

Spam filter

When your PAFworks service runs the spam filter, it reads every incoming message: obvious spam is refused at the door — the sending server tells its own user — and doubtful messages go to the Junk folder of each recipient, whatever their rules. It learns from what your colleagues mark as Spam or Not spam, for your organisation alone (see Junk mail).

Its state is in Admin › Mail and meetings, under Antispam: whether incoming mail is scanned, whether the filter learns, and after how many days the junk folders are emptied, with a Test connection button. There is nothing to set there: the filter is configured by whoever runs your PAFworks service.

Good to know