What is DNS?

Think of DNS as a directory of all the locations of web pages on the internet. Humans type pages into their browsers, things like premierepc.com. That website is hosted on a server and that server issues IP (Internet Protocol) addresses. DNS then translates the domain name to an IP address so your computer browser can load the resource.

DNS records are critical to your business operations.

Premium Managed DNS

At PremierePC, we believe in security from the ground up. One of the weakest areas we often encounter in a client’s environment is how they manage and permit access to their DNS (Domain Name System).

A Records

Most commonly used to map an IP address of a host. Generally, this points to your domain to its web server where your files are stored.

CNAME Records

Similar to A records, but they do not map to an IP address, instead they redirect to another hostname. A common example of this is WWW.
WWW is technically a sub-domain of your main domain. It usually points to the same location as your main domain.
WWW can be either an A or CNAME. A is preferred to reduce lookups and increase the time to load.

MX Records

Critical records which direct your mail flow to the provider of your choosing. If these records are misconfigured you will experience mail flow problems from remote senders unable to reach your server.
In certain cases, poorly guarded DNS can result in your email being compromised and redirected to remote services.
MX records are among the most critical and least secured business DNS records. Often these credentials are shared with low-level staff, third-party web developers and marketing firms.

TXT Records

These records can be used to store several key security records including SPF, DKIM and DMARC. More on those below. These records are also incredibly important and should be protected or managed by a competent IT provider.

Email Security TXT Records:

There are three main record types we utilize today to aid with inbound and outbound email security:

SPF (Sender Policy Framework)

This record signals to remote mail servers which legitimate sources are permitted to send email for your domain. Prior to the invention of this record type, there was no way to effectively combat spam from remote servers. By utilizing SPF we can now permit certain servers and services to relay mail on behalf of your domain. Common examples would be: Your web server’s IP address, a newsletter software, and of course your hosted mail provider.

DKIM (DomainKeys Identified)

DKIM lets an organization take responsibility for a message that is in transit. The organization is a handler of the message, either as its originator or as an intermediary. Their reputation is the basis for evaluating whether to trust the message for further handlings, such as delivery. Technically DKIM provides a method for validating a domain name identity that is associated with a message through cryptographic authentication.

DMARC (Domain-Based Message Authentication, Reporting & Conformance)

An email authentication, policy and reporting protocol. It builds on the widely deployed SPF and DKIM protocols, adding linkage to the author (“From:”) domain name, published policies for recipient handling of authentication failures, and reporting from receivers to senders, to improve and monitor the protection of the domain from fraudulent email.

Why is it so important?

Reading a few of the record types above you can easily see that anyone who gains access to your DNS can cause damage to your business’ online reputation in seconds.
Imaging losing control of where your business website directs or where your business email is delivered.

Something we have seen occur time and time again is where a business allows their “website people” to manage their domain, DNS and email. While this may seem like a great idea, it has often resulted in poor security implementation and guidance on critical areas of your business communication platform. While your website people may be experts at creative design and marketing, they may not be fully equipped to secure and manage your DNS values.

How Can We Help?

PremierePC offers fully managed premium DNS services to any client who hosts their domain with us. We become the gatekeeper of your DNS records and never permit third-party access. We help you manage and vet any changes with professional guidance on the implication of any proposed changes.

Further, our team helps to add and verify SPF, DKIM and DMARC for you.
Rest assured, you do not need to move your website to move your domain. We simply use A records which are discussed above to point to your provider’s web server.

premium managed dnsBy utilizing DNS Made Easy as our provider, we offer one of the fastest, most most reliable services sure to please you and your web vendor.

Having your domain and DNS managed by your IT professional is an often overlooked and easy way to increase business security while consolidating your team’s support to a single informed source.

Managed domain and DNS services are available exclusively to our service plan clients.