How to update DNS and advanced DNS records in support.web.com
Taking control of your domain settings allows you to customize exactly how your website and email function online. This guide shows you how to update DNS and advanced records within the support portal so you can easily manage where your internet traffic goes. Whether you need to edit existing settings or add new ones like MX or text records for better security, we will walk you through the simple steps to get everything configured correctly. Just remember that making these changes requires moving your nameservers to us, and it may take some time for the updates to appear everywhere.
What is manage DNS and advanced DNS records in support.web.com
DNS (Domain Name System) translates easily remembered domain names to the numerical IP addresses needed for locating computer services on the internet. Essentially, it acts as the internet's phone book.
Advanced DNS (ADNS) records are detailed instructions within DNS that guide how a domain's traffic is managed on the internet. See the explanation of each record below.
Updating DNS and advanced DNS records in support.web.com
DNS and Advanced DNS (ADNS) Records are already configured to utilize your services. However, these records can be modified when needed. If you want to keep one service active and host another service with a different provider, you can use our Advanced DNS Manager.
For example, you can keep your email inbox active and host a website with another provider. To use the Advanced DNS Manager, you must move your Domain Name Servers to our managed nameservers.
Follow the steps below to update advanced DNS records:
- Log in to your account via support.web.com.
- Click the Domains tile.
- There are two ways to reach the DNS and zone file settings for the domain:
- Option 1: Under the ADVANCED SETTINGS area on the right-hand side of the page, click on the DNS RECORDS or NAMESERVERS options.
- Option 2: Click on the ADVANCED SETTINGS tab located at the top, adjacent to the DOMAIN OVERVIEW tab.
- On the left-hand side of the screen, you will see DNS RECORDS, NAMESERVERS, and DNSSEC.
- To move your DNS to a new server, click Nameservers. Your current records will appear.
- To edit your Records, click the Edit this record icon to the right of Name Server 1 and Name Server 2.
- Enter the new nameservers, then click Save Changes.
- To change your advanced DNS records, click DNS RECORDS. Your current records will appear.
- To edit your Records, click the Edit icon to the right of the Record you would like to edit. Edit the Name, Value, or Priority, then click the checkbox.
- To add a new Record, click + Add New Record in the bottom left corner of the Record Box. Select the record from the drop-down menu. Add the Name and Priority (if applicable), then click the checkbox.
- To delete a Record, click on the Delete icon to the right of the Record you would like to delete. If you accidentally click delete on a record, click CANCEL, and the record will reappear.
- When you have made all the changes needed, click SAVE CHANGES.
You have changed the ADNS Records.
For an explanation of each record, select the arrow next to the record for more information.
A CNAME (canonical name) Record is a DNS record that can create an alias for the domain and allow traffic for the domain name to be redirected elsewhere. You can only create a CNAME for a third-level domain. The Advanced DNS manager does not provide the option to create an alias for the second level.
This would potentially create conflicts with other records and could result in the loss of email or website services. If you want to redirect traffic for a second-level domain, you can review our Web Forwarding product.
TXT Records have several functions. One common use is to use the TXT record to create a Sender Policy Framework or SPF. SPF Records help stop email spammers from forging the From fields in an email. This allows the owner of a domain to assign the IP address that can be used to send emails from that domain.
Need help creating an SPF TXT record? Click this site directly above the entries.
Another function is to create Domain-based Message Authentication, Reporting, and Conformance (DMARC). A domain's email handling instructions are published in DNS using DMARC. These instructions determine whether to take no action, quarantine the message, or reject it.
Domain Name System Security Extensions (DNSSEC) adds an extra layer of protection to your domain. It uses a signature when trying to resolve your domain, ensuring that the connection is secure.
Important:
- For domain names registered with us and that are using our nameservers, you can contact us so that we can enable it for you.
- For domain names registered with us but using third-party DNS services, please verify first whether DNSSEC is enabled with your DNS provider. If it's disabled on their end, this may cause issues with pulling up your website. If you choose to continue using DNSSEC, you may contact us to have your records, which are provided by your DNS provider, entered.
If you are having issues with the propagation or resolution of your domain name, we suggest temporarily disabling DNSSEC and continuing to troubleshoot the associated records.
- Why would I want it? DNSSEC provides added security against attacks such as cache poisoning.
- How do I turn it on? There's a toggle at the bottom of your domain page.
- Why can't I see the option to turn it on? DNSSEC is currently only available for .COM/.NET/.INFO/.ORG/.BIZ domains.
Certificate Authority Authorization (CAA) records allow you to restrict certificate providers for your domain. This gives you control over who can issue a certificate on your domain or subdomain. Your security certificate provider can give you the details on what to enter for your CAA record.
How do I know what to input? Reach out to the provider of your security certificate for details on what to enter for your CAA record.
CAA Records require these values:
- Flag: Number between 0 and 255.
- Tag: This specifies the property you want to associate with the value(issue, issuewild).
- Value: This is typically the domain of your security provider.
- TTL: This is the time to live for the record to be saved by the resolver.
Review
This guide explains how to update DNS and advanced records within the support portal to help users manage their domain traffic effectively. The text outlines the necessary steps to modify existing entries or add new ones, like mail and security records, which ensure websites and email services function correctly. It is essential to remember that these adjustments require pointing the domain to specific nameservers and might take a brief period to spread across the internet. Understanding these settings allows for full customization of an online presence.