Who This Is For / When to Use
This guide is for Kyrios users who are setting up email sending and need to authenticate a domain or subdomain with Mailgun to enable reliable outbound email delivery.
What Connecting Mailgun to DNS Does
Connecting Mailgun to your DNS manager verifies domain ownership and authorizes Mailgun to send email on your behalf. This process improves deliverability, enables tracking and unsubscribe compliance, and prevents spoofing or spam filtering issues.
Mailgun requires specific DNS records (TXT, MX, and CNAME) to be added before email sending is enabled.
Step 1: Create and Verify a Mailgun Account
You must have an active and verified Mailgun account before adding DNS records.
Create a Mailgun account.
Verify both your email address and phone number.
Choose a paid plan if you plan to send production-level email volume.
Step 2: Add a Sending Domain in Mailgun
A dedicated sending domain or subdomain should be used for email to protect your primary domain reputation.
In Mailgun, open the left navigation.
Go to Send → Sending → Domain Settings.
Click Add new domain.
Enter your domain or subdomain (example:
mg.yourdomain.com).Select the appropriate region (US or EU).
Choose Shared IP unless a dedicated IP has been provided.
Click Add Domain.
Step 3: Locate DNS Records in Mailgun
After adding the domain, Mailgun generates the DNS records required for verification.
You will see:
2 TXT records (for SPF and DKIM)
2 MX records (for bounce and reply handling)
1 CNAME record (for tracking)
These values are unique to your domain and must be copied exactly.
Step 4: Add DNS Records to Your DNS Manager
All DNS records must be added in your DNS provider (for example: Cloudflare, GoDaddy, Namecheap).
TXT Records
TXT records authorize Mailgun to send email and sign messages.
Type: TXT
Host: Use only the subdomain portion (example:
mailo._domainkey.mg)Value: Paste the full value from Mailgun
TTL: Default (1 hour)
Repeat for the second TXT record.
MX Records
MX records route bounces and replies correctly.
Type: MX
Host: Use the subdomain only (example:
mg)Points to: Value provided by Mailgun
Priority: 10
TTL: Default (1 hour)
Repeat for the second MX record.
CNAME Record (Tracking)
The CNAME record enables click and open tracking.
Type: CNAME
Host:
email.mg(example)Points to: Value provided by Mailgun
TTL: Default (1 hour)
[Screenshot Placeholder: 1763722656986-unnamed - 2025-11-21T185727.869.png — DNS record type dropdown showing CNAME]
Step 5: Verify DNS Settings in Mailgun
Once all records are added:
Return to Mailgun Domain Settings.
Click Verify DNS Settings.
Confirm that all five records show a green checkmark.
If records do not verify immediately, wait up to 24–48 hours for DNS propagation.
Step 6: Enable Tracking and Unsubscribe Settings (Optional but Recommended)
Mailgun tracking and unsubscribe settings ensure compliance and campaign visibility.
In Domain Settings, scroll to Tracking.
Enable Click tracking and Open tracking.
Enable Unsubscribes.
Set the tracking protocol to HTTPS.
Click Save.
How to Enable Unsubscribe Tracking Specifically
Unsubscribe tracking automatically inserts unsubscribe links into email footers.
Go to Send → Sending → Domain Settings.
Select your domain from the dropdown.
Scroll to Unsubscribes.
Click Edit.
Toggle On.
Click Save unsubscribe tracking settings.
Common Issues and Fixes
DNS Records Will Not Verify
Cause: Incorrect host values or incomplete propagation. Fix: Ensure the host field contains only the subdomain portion, not the full domain. Wait up to 48 hours before retrying.
Tracking Warning Message Appears
Cause: CNAME record is missing or incorrect. Fix: Confirm the tracking CNAME record exists and matches Mailgun exactly.
Emails Go to Spam
Cause: Domain not fully authenticated or warmed up. Fix: Verify all DNS records, enable tracking, and gradually increase sending volume.