Point company email DNS at a Vietnamese registrar

Bought your domain at Mat Bao, PA Vietnam, Nhan Hoa or iNET? Add about six DNS records and your company email runs on VNe. Takes around fifteen minutes, no technical background needed.

Quick summary

Open the «Domains» page in the VNe admin area.
Open the DNS management page for the domain. The VNe «Domains» page names where your DNS is managed (Mat Bao, PA Vietnam, Cloudflare…) and has a button to open it.
Copy each record from VNe into that DNS page.
Back in VNe, press «Check». VNe shows which records are already correct.

The exact values for your domain are on the Domains page, each box has a copy button.

Before you start: already have email? Don't change MX yet

If the company uses Google Workspace, Microsoft 365 or hosting email, go in this order: copy old mail to VNe first, change MX after. See Move company email to VNe without losing mail. The SPF, DKIM, DMARC and verification records can be added right away without affecting incoming mail.

Records to add

Type	Name	Value	What it does
TXT	`@`	`mp-verify=…` (copy from VNe)	Proves the domain is yours
MX	`@`	`mail.vne.email` (priority 10)	Mail sent to the company arrives at VNe
TXT	`@`	`v=spf1 include:_spf.vne.email -all`	Allows VNe to send mail for the domain
TXT	`202610._domainkey`	`v=DKIM1; k=rsa; p=…` (copy from VNe)	Digital signature, mail can't be forged
TXT	`_dmarc`	`v=DMARC1; p=quarantine; …` (copy from VNe)	Tells receivers what to do with forged mail
CNAME	`autoconfig`	`autoconfig.vne.email`	Outlook, Thunderbird and phones set themselves up

The verification code, the DKIM key (including its name, numbered by the month the key was created) and the DMARC record are specific to each domain. Always use the copy buttons on the «Domains» page, never type them by hand.

Mat Bao

Sign in to the Mat Bao service portal, open your domain list and pick the company domain.
Open DNS management (record configuration).
Delete the old MX records (only once old mail has been copied, see above).
Add each record from the table. In the «Name» box type @ for the root domain, and _dmarc (without the domain suffix) for DMARC.
For MX: put priority 10 in its own box; the value box holds only mail.vne.email.

PA Vietnam

Sign in to the PA Vietnam customer portal and choose the domain.
Go to DNS / record management.
Add the records from the table. If the name box doesn't accept @, leave it empty — many panels treat empty as the root domain.

Nhan Hoa

Sign in to the Nhan Hoa control panel, choose the domain and open DNS management.
Add the records from the table. If there is a TTL box, use 3600.

Other registrars (iNET, Tenten, Z.com, Cloudflare…)

The steps are the same: look for «DNS», «Records» or «Zone». Check whether the domain uses someone else's nameservers (for example Cloudflare or your web host). If so, add the records where the nameservers live, not at the registrar. Not sure? The VNe «Domains» page reads your nameservers and names the place to add the records.

Common mistakes

Two SPF records. A domain may have only one record starting with v=spf1. With two, both break and mail lands in spam. If you also send through another service, merge them into one line, e.g. v=spf1 include:_spf.vne.email include:other-service -all.
Domain repeated in the name. Typing _dmarc.company.vn in the name box makes the panel append the domain again: _dmarc.company.vn.company.vn. Type only the part before the domain.
Trailing dot. VNe shows mail.vne.email. with a trailing dot. If a panel rejects it, drop the dot.
Long DKIM key. The key is longer than 255 characters. Most panels split it automatically; if yours says it's too long, contact the registrar's support or move the nameservers to a provider that supports long records.
No update yet. DNS takes from a few minutes to a few hours to propagate. VNe re-checks periodically, and you can press «Check» again any time.

Questions

Will changing MX lose any mail?

No, as long as old mail is copied first. For 72 hours after the change some senders still deliver to the old system; VNe picks those messages up automatically.

Want to keep Google Workspace for some people?

Use «Run alongside» mode on the Domains page: MX stays unchanged and SPF already covers both sides.

No access to the DNS page?

Whoever bought the domain (often accounting or your web agency) holds the account. Send them the record table from the «Domains» page, or invite them as a temporary admin.