The Ultimate Guide to Connecting Your Custom Domain

Mastering Your Domain: The Ultimate Setup Guide

Owning your domain is the first step toward digital sovereignty. But a domain without a powerful security layer is like a sports car without an engine. Enter MailGuard.

We leverage enterprise-grade infrastructure (running on the Cloudflare Edge network) to process your email in milliseconds, strip out tracking pixels, and deliver it safely to your real inbox.

In this deep dive, we will walk you through setting up your domain to work with MailGuard, explaining not just how to click the buttons, but why it works.

The Architecture of Private Email

Before we dive into the setup, let's visualize what we are building. We are essentially placing a firewall between the internet and your real inbox.

When an email is sent to netflix@yourdomain.com:

1. MX Record: The sender looks up where to deliver mail. Your DNS directs them to our secure processing nodes.
2. Processing: MailGuard receives the email at the Edge.
3. Routing: our engine checks your rules (e.g., "Is this alias blocked?").
4. Delivery: We forward the cleaned message to your destination address.

Step 1: Add Your Domain to MailGuard

First, tell us which domain you want to protect.

1. Log in to your MailGuard Dashboard.
2. Navigate to Domains > Add Domain.
3. Enter your domain name (e.g., privacy-fortress.com).

Step 2: Configure DNS Records (The Handover)

This is the most critical step. You need to tell the internet: "Don't send email directly to my server; send it to MailGuard for inspection."

We perform this magic using Cloudflare under the hood. To enable our Edge Workers to protect you, you will need to point your nameservers or add the specific records provided in your dashboard.

1. Log in to your Registrar (where you bought the domain, e.g., GoDaddy, Namecheap).
2. Find DNS Management.
3. Add the MX Records and TXT Records provided in the MailGuard setup screen.

Note: Propagation acts like gossip—it takes time to spread. It can take anywhere from 10 minutes to 24 hours for changes to take effect.

Step 3: Verify Ownership

Once your records are added:

1. Return to the MailGuard Dashboard.
2. Click Verify.
3. Once the status turns Green, you are live!

Step 4: Configuring Destination Addresses

You need to tell us where to forward your email.

1. Go to Settings > Forwarding.
2. Add your real email address (e.g., my.real.email@gmail.com).
3. Verification: We will send a confirmation email. Click the link to verify ownership.

Step 5: Strategies for Aliases

You have two strategies here:

Strategy A: Explicit Aliases

You manually create every address you want to use.

• Create amazon@yourdomain.com -> forwards to real@gmail.com.
• Pros: Total control. No spam on uncreated addresses.
• Cons: Tedious. You have to log in to create a new one.

Strategy B: The Catch-All (Recommended for Power Users)

You accept email sent to anything at your domain.

• random-word@yourdomain.com -> forwards to real@gmail.com.
• Pros: Infinite aliases without setup. Just invent gym@yourdomain.com at the front desk.
• Cons: Potential for more spam (spammers guessing words).

MailGuard assumes Catch-All by default but allows you to block specific patterns.

Troubleshooting Common Issues

"Emails aren't arriving!"

1. Check Spam: Google/Outlook might flag forwarded emails initially. Mark them as "Not Spam" to train the filter.
2. SPF Record: Ensure you added the SPF TXT record. It should allow our mailguard.cc (or underlying provider) to send mail.
3. Verification: Did you click the verification link sent to your destination address? The status must be "Verified".

Conclusion

You have now decoupled your identity from your inbox. You can hand out unique addresses to every service, track who sells your data, and burn the bridge (disable the alias) if they start spamming you.

In the next guide, we will secure this setup further with the "Holy Trinity" of email authentication: SPF, DKIM, and DMARC.