# How do you add email DNS records in Network Solutions?

URL: https://iblockspam.com/blog/add-email-dns-records-network-solutions
Last updated: 2026-10-22
Published: 2026-10-22
Topic: Setup guides
Author: iBlockSpam Team

> How to add MX, SPF, DKIM and DMARC records in Network Solutions DNS: the Refers to and Other Host fields, the 2-hour default TTL, and the default SPF record.

## Short answer

In Network Solutions, select Domains, choose your domain, click Manage and open the DNS tab. Click +Add Record, choose TXT, CNAME or MX, set Refers to as @ for the root domain or Other Host with a prefix such as _dmarc, enter the value from your provider, keep or set the TTL, and click Add.

Network Solutions is one of the oldest registrars, so many long-lived business domains still keep their DNS there. Its editor works like most others, with one naming difference: instead of a Host field, you choose **Refers to** and pick **@**, **www** or **Other Host**. Many domains there also already have an SPF record, which you must edit rather than duplicate.

This guide covers MX, SPF, DKIM and DMARC records in Network Solutions, using its help center and Microsoft's Network Solutions instructions. For background on the records, read [SPF vs DKIM vs DMARC](https://iblockspam.com/blog/spf-vs-dkim-vs-dmarc).

## Is your DNS actually hosted at Network Solutions?

You can only edit records at Network Solutions if the domain uses its nameservers. Its [DNS help article](https://www.networksolutions.com/help/article/manage-dns-adns-records) explains that managing records there requires moving to its nameservers, and warns: "When you move nameservers to Network Solutions, your existing nameservers will no longer be used." Its notice adds that websites and email hosted at other providers can be lost when you do that.

So check before you change anything. Look up the live nameservers with our [MX Lookup](https://iblockspam.com/tools/mx-lookup). If they belong to another provider, such as Cloudflare, add your records there; our [Cloudflare guide](https://iblockspam.com/blog/add-dmarc-spf-dkim-records-cloudflare) covers that case.

## Where do you add DNS records in Network Solutions?

At the time of writing (October 2026), Network Solutions' current view works like this ([Network Solutions Help](https://www.networksolutions.com/help/article/manage-dns-adns-records)):

1. Sign in and select **Domains** on the left side of the page.
2. Select the domain and click **Manage**.
3. Go to the **DNS** tab.
4. Click **+Add Record**. A pop-up window appears.
5. Choose the record type and fill in the fields.
6. Click **Add**.

To change an existing record, click the **vertical ellipsis** next to it, select **Edit**, make your change and click **Edit** to save. To change several at once, Network Solutions offers a **Bulk Edit** button, which "supports Advanced DNS records only."

Older accounts and [Microsoft's Network Solutions instructions](https://learn.microsoft.com/en-us/microsoft-365/admin/dns/create-dns-records-at-network-solutions) use a different path: **Advanced Tools**, then **Manage** next to **Advanced DNS Records**, then **+ADD RECORD**. Both reach the same records. A **Classic View** also exists, but it can't add or edit CAA records.

The fields:

| Field | What to enter |
|---|---|
| **Refers to** | **@** for the root domain, **www**, or **Other Host** for any other prefix |
| **Host Name** | Appears when you pick Other Host. Enter only the prefix, such as `_dmarc` |
| **TXT Value** / **Mail Server** / **Alias to** | The value for that record type, from your provider |
| **Priority** | MX only. The lowest number is the primary mail server |
| **TTL** | In seconds. Network Solutions' default is 7200 (2 hours) |

Microsoft's instructions add two details. When you save a record with Refers to set to **@**, "The system will change this value to **@ (None)**." And for MX and CNAME targets, the value "CANNOT end with a period (.)", so remove any trailing dot your provider shows.

## How do you add or edit an SPF record in Network Solutions?

SPF is a TXT record that refers to **@**. Network Solutions is direct about the rule: "Only one SPF record is allowed per domain," and "Publishing multiple SPF records can cause SPF authentication to fail, potentially affecting email deliverability." [RFC 7208, section 3.2](https://www.rfc-editor.org/rfc/rfc7208.html#section-3.2) says the same.

Many Network Solutions domains already have one. Its help article tells customers using its website contact forms to set their SPF record to this example:

```
v=spf1 include:spf.registeredsite.com include:spf.cloudus.oxcs.net ~all
```

1. On the **DNS** tab, find the TXT record that refers to **@** and starts with `v=spf1`.
2. If it exists, open the vertical ellipsis, select **Edit**, add your provider's include before `~all` or `-all`, and remove includes for services you no longer use.
3. If none exists, click **+Add Record**, choose **TXT**, set **Refers to** to **@**, paste the record into **TXT Value** and click **Add**.

For example, a domain moving to Microsoft 365 that still uses Network Solutions' website forms might end up with `v=spf1 include:spf.protection.outlook.com include:spf.registeredsite.com ~all`. Check what you actually send from before you keep or remove an include. The [SPF Record Generator](https://iblockspam.com/tools/spf-generator) builds a merged record and counts lookups, and our [SPF provider pages](https://iblockspam.com/spf) list each include.

## How do you add a DKIM record in Network Solutions?

The DKIM record comes from whoever sends your mail. Network Solutions' [DKIM article](https://www.networksolutions.com/help/article/adjust-dkim-settings) says its Cloud Mail and Standard Email users don't need to set up DKIM themselves, and points Google Workspace and Microsoft 365 customers to those providers' instructions.

### DKIM as a TXT record

1. Click **+Add Record** and choose **TXT**.
2. Set **Refers to** to **Other Host** and enter the selector host, for example `google._domainkey`.
3. Paste the full key, starting `v=DKIM1;`, into **TXT Value**. Network Solutions says "You will need the entire TXT Value you were given."
4. Click **Add**.

Network Solutions' help doesn't document a length limit or splitting rules for TXT values at the time of writing (October 2026). If your provider shows a 2048-bit key as several quoted chunks, that's valid: [RFC 6376, section 3.6.2.2](https://www.rfc-editor.org/rfc/rfc6376.html#section-3.6.2.2) says the strings are joined "with no intervening whitespace." Check the result with the [DKIM Checker](https://iblockspam.com/tools/dkim-checker), and see our guide to [DKIM keys too long for a TXT record](https://iblockspam.com/blog/dkim-2048-bit-key-txt-record-too-long) if it's cut short.

### DKIM as CNAME records

Microsoft 365 and many sending platforms use CNAMEs.

1. Click **+Add Record** and choose **CNAME**.
2. Set **Refers to** to **Other Host** and enter `selector1._domainkey` as the **Host Name**.
3. Paste the provider's target into **Alias to**, without a trailing period.
4. Click **Add**, then repeat for `selector2._domainkey`.

Network Solutions says "CNAME records can only be created for third-level domains," so a CNAME can't sit on the root. That's fine for DKIM, which always uses a prefix. Then turn signing on in your provider's console: our [DKIM setup guide for Microsoft 365 and Google Workspace](https://iblockspam.com/blog/dkim-setup-microsoft-365-google-workspace) shows where, and [DKIM records by provider](https://iblockspam.com/dkim) lists each service's selectors.

## How do you add a DMARC record in Network Solutions?

Network Solutions' DMARC instructions use the standard format, `v=DMARC1; p=none; rua=mailto:[user email]`, and recommend moving from none to quarantine to reject while you watch reports.

1. Click **+Add Record** and choose **TXT**.
2. Set **Refers to** to **Other Host** and enter `_dmarc` as the **Host Name**.
3. Enter your policy as the **TXT Value**, for example `v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com`.
4. Click **Add**.

Network Solutions notes the report address "must be under the domain you are managing" unless you publish an extra DNS record. That record is DMARC's external reporting authorization: [RFC 9989, Appendix B.2](https://www.rfc-editor.org/rfc/rfc9989.html#appendix-B.2) shows the receiving domain publishing a TXT record such as `example.com._report._dmarc.thirdparty.example.net` with the value `v=DMARC1;`. It goes on the receiving domain, not yours; our guide to [DMARC rua and ruf addresses](https://iblockspam.com/blog/dmarc-rua-ruf-reporting-addresses) explains it. The [DMARC Record Generator](https://iblockspam.com/tools/dmarc-generator) builds the record.

## How do you change MX records in Network Solutions?

1. On the **DNS** tab, note your current MX records so you can roll back.
2. Click **+Add Record** and choose **MX**.
3. Set **Refers to** to **@**.
4. Enter the host in **Mail Server**, without a trailing period, and set **Priority** and **TTL**.
5. Click **Add**, and repeat for each further mail server.
6. Delete the old MX records through the vertical ellipsis once your new provider's instructions say to. Microsoft's instructions say to delete all other MX records when you move to Microsoft 365.

Network Solutions describes MX records simply: "Without MX records, a domain would be unable to receive email messages." Read [how to change MX records without losing email](https://iblockspam.com/blog/change-mx-records-without-losing-email) first, and consider lowering the TTL a few hours ahead. The 2-hour default means resolvers can keep the old answer for that long; our [TTL guide](https://iblockspam.com/blog/dns-ttl-mx-change-propagation) explains the timing.

## What does a complete Network Solutions email setup look like?

An example for a domain on Microsoft 365. Your values will differ.

| Type | Refers to | Host Name | Value | Priority |
|---|---|---|---|---|
| MX | @ | | `example-com.mail.protection.outlook.com` | 0 |
| TXT | @ | | `v=spf1 include:spf.protection.outlook.com ~all` | |
| CNAME | Other Host | `selector1._domainkey` | target from the Defender portal | |
| CNAME | Other Host | `selector2._domainkey` | target from the Defender portal | |
| CNAME | Other Host | `autodiscover` | `autodiscover.outlook.com` | |
| TXT | Other Host | `_dmarc` | `v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com` | |

## How do you check the records after saving?

Network Solutions says "Advanced DNS updates may take up to two hours to fully propagate." Then:

1. **MX**: [MX Lookup](https://iblockspam.com/tools/mx-lookup) shows only your new mail servers.
2. **SPF**: [SPF Checker](https://iblockspam.com/tools/spf-checker) finds one record with 10 lookups or fewer.
3. **DKIM**: [DKIM Checker](https://iblockspam.com/tools/dkim-checker) finds a valid key at each selector.
4. **DMARC**: [DMARC Checker](https://iblockspam.com/tools/dmarc-checker) parses your policy.
5. **Headers**: a test message to an outside mailbox shows `spf=pass`, `dkim=pass` and `dmarc=pass`. Our [header reading guide](https://iblockspam.com/blog/how-to-read-email-headers) shows where to look.

## What are the common Network Solutions email DNS mistakes?

- **Adding a second SPF record** next to the existing `spf.registeredsite.com` one.
- **Typing the full domain** into Host Name. Use `_dmarc`, not `_dmarc.example.com`.
- **Leaving a trailing period** on an MX or CNAME target.
- **Forgetting the 2-hour TTL** when planning an MX cutover.
- **Moving nameservers to Network Solutions** without first copying email records from the old DNS host.

## Next steps

1. Run the [Email Health Check](https://iblockspam.com/tools/email-health-check) to see MX, SPF, DKIM and DMARC together.
2. Build records with the [SPF Record Generator](https://iblockspam.com/tools/spf-generator) and [DMARC Record Generator](https://iblockspam.com/tools/dmarc-generator).
3. Moving mail between providers? Use the [change email hosting provider checklist](https://iblockspam.com/blog/change-email-hosting-provider-checklist).
4. Keep an eye on changes: the free [Domain Watch](https://iblockspam.com/free-monitoring) checks your public MX, SPF and DMARC weekly and emails you when they change.

If you add a filtering service such as iBlockSpam, the MX steps are the same with its mail servers as the values. More walk-throughs are in [setup guides](https://iblockspam.com/blog/topic/setup).

## Frequently asked questions

### What does Refers to mean in Network Solutions DNS?

Refers to is the Network Solutions name for the host a record belongs to. Choose @ for the root domain, www for the www host, or Other Host to type your own prefix, such as _dmarc or selector1._domainkey. Network Solutions adds your domain to the prefix, so don't type the full name.

### How long do Network Solutions DNS changes take?

Network Solutions says Advanced DNS updates may take up to two hours to fully propagate, and nameserver changes 24 to 48 hours. Its default TTL is 7200 seconds (2 hours), so an edit to an existing record can take that long to reach resolvers that cached the old value.

### Why does my Network Solutions domain already have an SPF record?

Network Solutions' DNS help shows an SPF record containing include:spf.registeredsite.com for its own services, such as website contact forms. Only one SPF record is allowed per domain, so don't add a second one. Edit the existing record: keep the includes you still use and add your new provider's include.

### Can I add a CNAME record for my root domain in Network Solutions?

No. Network Solutions says CNAME records can only be created for third-level domains, such as autodiscover.example.com or a DKIM selector host, and suggests its Web Forwarding product for the root. That rule doesn't affect email, because MX, SPF and DMARC are not CNAME records.

### Can my DMARC reports go to an address on another domain at Network Solutions?

Yes, with one extra step. Network Solutions says the report address must be under the domain you manage, unless you publish a DNS record allowing reports from the other domain. That record goes on the receiving domain, which is how DMARC's external reporting authorization works. Hosted DMARC services publish it for you.

## Sources

- [Network Solutions Help: How to manage DNS and advanced DNS records](https://www.networksolutions.com/help/article/manage-dns-adns-records)
- [Network Solutions Help: How to Set Up DKIM and DMARC](https://www.networksolutions.com/help/article/adjust-dkim-settings)
- [Microsoft Learn: Connect your DNS records at Network Solutions to Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/admin/dns/create-dns-records-at-network-solutions)
- [RFC 7208: Sender Policy Framework (SPF), section 3.2](https://www.rfc-editor.org/rfc/rfc7208.html#section-3.2)
- [RFC 6376: DomainKeys Identified Mail (DKIM), section 3.6.2.2](https://www.rfc-editor.org/rfc/rfc6376.html#section-3.6.2.2)
- [RFC 9989: DMARC, Appendix B (external report destinations)](https://www.rfc-editor.org/rfc/rfc9989.html)

## Free tools for this guide

- [MX Lookup](https://iblockspam.com/tools/mx-lookup): See where your mail is delivered, spot unfiltered backup MX and broken hosts.
- [SPF Checker](https://iblockspam.com/tools/spf-checker): Count real DNS lookups, find PermErrors, loops and risky "all" settings.
- [DKIM Checker](https://iblockspam.com/tools/dkim-checker): Validate DKIM keys by selector, including key type and strength.
- [DMARC Checker](https://iblockspam.com/tools/dmarc-checker): Check your policy, reporting and the safe path from p=none to reject.

---

Source: iBlockSpam, https://iblockspam.com/blog/add-email-dns-records-network-solutions (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt