---
title: "Publishing DNS records in Cloudflare"
description: "TXT and CNAME entries for SPF, DKIM, and DMARC when Cloudflare proxies email-related names correctly."
translationKey: "ts-cloudflare-dns"
tags: [cloudflare, dns, txt]
publishedAt: "2026-05-01"
lastReviewedAt: "2026-05-01"
indexable: true
faq:
  - question: "Why must many mail DNS records stay DNS-only in Cloudflare?"
    answer: "Orange-cloud proxying can interfere with MX, DKIM CNAMEs, or provider expectations unless the vendor explicitly documents proxied support."
  - question: "How strict should TXT quoting be for SPF or DKIM?"
    answer: "Follow your mail provider’s exact TXT formatting—split strings and quotes matter because oversized or malformed TXT payloads fail verification."
---
> **Canonical:** https://formreceipt.com/docs/troubleshooting/cloudflare-dns-records

## Proxy status

Mail-related hostnames used for MX or DKIM CNAMEs generally must be **DNS only** (grey cloud) unless your provider explicitly supports proxied modes—incorrect orange-cloud settings break mail.

## TXT entries

Add SPF, DKIM public keys, and DMARC TXT records exactly as supplied—preserve quotation rules your provider documents.

## References

See [Cloudflare DNS record basics](https://developers.cloudflare.com/dns/manage-dns-records/how-to/create-dns-records/) for UI navigation patterns.