I have one of my domains on the 2nd level domain .co.uk., registered with 123-Reg, a British DNs provider, and I get various services on that domain from Google Apps, by the note US company.
I would like to use a sub domain for services provided by another provider, specifically I would like to get PEC services from an Italian provider. PEC is an italian standard to digitally sign and certify emails, and basically I would like to use a pec.[mydomain].co.uk. 4th level domain (you may read RFC 6109 for further details about PEC, but I reckon that's not really necessary to answer my questions below, from my understanding on the DNS side it should really work as an usual mail server) for such PEC services.
From my understanding so far, I need to set up a MX record to point to the PEC provider (usually something like mx.pec.[provider].it.).
Currently my DNS settings look like this:
@ A [x.y.w.z]
@ MX 1 ASPMX.L.GOOGLE.COM.
@ MX 5 ALT1.ASPMX.L.GOOGLE.COM.
@ MX 5 ALT2.ASPMX.L.GOOGLE.COM.
@ MX 10 ASPMX2.GOOGLEMAIL.COM.
@ MX 10 ASPMX3.GOOGLEMAIL.COM.
@ MX 10 ASPMX4.GOOGLEMAIL.COM.
@ MX 10 ASPMX5.GOOGLEMAIL.COM.
calendar CNAME ghs.google.com.
doc CNAME ghs.google.com.
mail CNAME ghs.google.com.
my CNAME ghs.google.com.
www CNAME ghs.google.com.
Am I right to think I should add at the very least a MX record as:
pec MX 10 MX.PEC.[provider].IT.
Also, I am right to think I'll have to add an A record, or a CNAME (whatever the Italian provider will ask me really, although I hope a CNAME will be enough), for pec as well?
Update 1
Just an update: I did purchase the PEC service from an Italian provider for a 4th level domain (on the .uk TLD, not the .it), they did let me apply for pec.[mydomain].co.uk., and then they did sell me a mail box on that domain (something like me@pec.[mydomain].co.uk.). They haven't yet sent me any special configuration info or request (I reckon I'll have to wait for the end of the process, they are currently "certifying" my domain, whatever they mean with certification in this context). I have decided to speed up things from my side, so I have already updated my domain DNS (serendipitously the provider I chose actually had their required mx record somewhere in the contract), so that my domain is already answering to mx lookups:
C:\>nslookup
Default Server: [mydnsserver].co.uk
Address: x.y.w.z
> set q=mx
> [mydomain].co.uk.
Server: [mydnsserver].co.uk
Address: x.y.w.z
Non-authoritative answer:
[mydomain].co.uk. MX preference = 5, mail exchanger = alt1.aspmx.l.google.com
[mydomain].co.uk. MX preference = 10, mail exchanger = aspmx4.googlemail.com
[mydomain].co.uk. MX preference = 10, mail exchanger = aspmx5.googlemail.com
[mydomain].co.uk. MX preference = 5, mail exchanger = alt2.aspmx.l.google.com
[mydomain].co.uk. MX preference = 10, mail exchanger = aspmx2.googlemail.com
[mydomain].co.uk. MX preference = 1, mail exchanger = aspmx.l.google.com
[mydomain].co.uk. MX preference = 10, mail exchanger = aspmx3.googlemail.com
alt1.aspmx.l.google.com internet address = 173.194.70.27
aspmx4.googlemail.com internet address = 173.194.78.27
aspmx5.googlemail.com internet address = 74.125.130.27
alt2.aspmx.l.google.com internet address = 173.194.69.27
aspmx2.googlemail.com internet address = 173.194.69.27
aspmx.l.google.com internet address = 173.194.67.27
aspmx3.googlemail.com internet address = 74.125.127.27
> pec.[mydomain].co.uk.
Server: [mydnsserver].co.uk
Address: x.y.w.z
Non-authoritative answer:
pec.[mydomain].co.uk. MX preference = 10, mail exchanger = mx.pec.[provider].it
mx.pec.[provider].it internet address = i.j.k.l
>
Update 2
At the moment, the answer is still a delivery failure (the reason is given in Italian, it stands for "The message was refused by the system. The address of the receiver is unknown, or it is not enabled to the reception of non certified mail"):
Delivery to the following recipient failed permanently:
me@pec.[mydomain].co.uk
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 554 554 <me@[mydomain].co.uk>: Messaggio rifiutato dal sistema. Indirizzo destinatario sconosciuto o non abilitato alla ricezione di posta non certificata. (state 14).
But I reckon at the moment I have just to wait.
Update 3
I got the PEC mailbox settings from the provider, and everything works fine, the message were not delivered because by default PEC providers do not accept mails from non PEC mailbox, I had to fiddle with the settings to allow those in, and even after they are received in a funny way (they are marked as an "anomaly"), but all this is PEC specific, it does look like from a DNS point of view that all is required is just a MX record.
If you need mail for
pec.example.co.uk
to be deliveredmx.pec.example.it
, then yes, your DNS record is correct. You only need an A or CNAME record if the hostname is used for non-mail delivery purposes (e.g. a website athttp://pec.example.co.uk
run by the PEC provider). You should really just get the exact requirements from the provider before updating your DNS setup though.