$ORIGIN cnx.email.
$TTL 3600

@   IN  SOA ns1.cnx.network. hostmaster.cnx.network. (
        2026061401  ; serial   (ignored: Knot auto-assigns a dateserial on signing)
        3600        ; refresh
        900         ; retry
        604800      ; expire
        300 )       ; negative-cache TTL

@       IN  NS      ns1.cnx.network.
@       IN  NS      ns2.cnx.network.

; ---- Mail ----
mx1     IN  A       5.223.65.38
@       IN  MX 10   mx1.cnx.email.
@       IN  TXT     "v=spf1 mx -all"
_dmarc  IN  TXT     "v=DMARC1; p=quarantine; rua=mailto:postmaster@cnx.email"