diff --git a/mini-beieli.ch.zone b/mini-beieli.ch.zone
index 14fb009..f83ad06 100644
--- a/mini-beieli.ch.zone
+++ b/mini-beieli.ch.zone
@@ -2,7 +2,7 @@ $TTL 4h
 $ORIGIN mini-beieli.ch.
 
 @  1D  IN	 SOA ns1.nbit.ch. hostmaster.nbit.ch. (
-			      2024080901 ; serial
+			      2024080904 ; serial
 			      3H ; refresh
 			      120; retry
 			      2w ; expire
@@ -11,10 +11,10 @@ $ORIGIN mini-beieli.ch.
        IN  NS     ns1.nbit.ch.   ; Primary Nameserver
        IN  NS     ns2.nbit.ch.   ; Secondary Nameserver
 
-       IN  MX  10 mail.nbit.ch.  ; Mail Exchange
+       IN  MX  10 mx1.nbit.ch.  ; Mail Exchange
 
-       IN  TXT "v=spf1 mx a:onyx-dev.nbit.ch -all"
-       IN  SPF "v=spf1 mx a:onyx-dev.nbit.ch -all"
+       IN  TXT "v=spf1 mx a:mx1.nbit.ch a:mx2.nbit.ch -all"
+       IN  SPF "v=spf1 mx a:mx1.nbit.ch a:mx2.nbit.ch -all"
 
 ; server host definitions
           IN      A       5.75.251.111
diff --git a/nbit.ch.zone b/nbit.ch.zone
index 81ffccf..197ff91 100644
--- a/nbit.ch.zone
+++ b/nbit.ch.zone
@@ -2,7 +2,7 @@ $TTL 4h
 $ORIGIN nbit.ch.
 
 @  1D  IN	 SOA ns1.nbit.ch. hostmaster.nbit.ch. (
-			      2024080604; serial
+			      2024080902; serial
 			      3H ; refresh
 			      120; retry
 			      2w ; expire
@@ -14,7 +14,7 @@ $ORIGIN nbit.ch.
        IN  MX  10 mx2.mail.hostpoint.ch.  ; Mail Exchange
        IN  MX  10 mx1.mail.hostpoint.ch.  ; Mail Exchange
 
-       IN  TXT "v=spf1 redirect=spf.mail.hostpoint.ch"
+       IN  TXT "v=spf1 a:mx1.nbit.ch a:mx2.nbit.ch redirect=spf.mail.hostpoint.ch"
 
 ; server host definitions
               IN      A       5.75.251.111
@@ -38,6 +38,10 @@ onyx          IN      A       5.75.251.111
 onyx          IN      AAAA    2a01:4f8:c012:c21c::1
 onyx-dev      IN      A       168.119.114.44
 onyx-dev      IN      AAAA    2a01:4f8:c2c:9c5e::1
+mx1           IN      A       5.75.251.111
+mx1           IN      AAAA    2a01:4f8:c012:c21c::1
+mx2           IN      A       168.119.114.44
+mx2           IN      AAAA    2a01:4f8:c2c:9c5e::1
 
 20240806-ed25519-085d44a5._domainkey TXT "v=DKIM1; k=ed25519; h=sha256; p=z8wCQQMxuoqO/lNiz/K4ZaP2AOp1EUmoPUAKNwal4aY="
 20240806-rsa1024-085d44a5._domainkey TXT "v=DKIM1; k=rsa; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNswO/GUfPV8VXrDH4+k3ZOI93jnEHCsnv3GNGbXzljpsCeYQ/XkGDaUzAu1lwx68eZyJ168+jmqriNI1PfVCWOKYYM5kjJc1OD6IKU/JbputPGquPSOprOM1KUE1QpW4q0Xy4secCRRVGEpZueHwCas0s4PKz2EkvMI2BO7UqsQIDAQAB"
diff --git a/wo-bisch.ch.zone b/wo-bisch.ch.zone
index 0e49569..7ceb6d8 100644
--- a/wo-bisch.ch.zone
+++ b/wo-bisch.ch.zone
@@ -2,7 +2,7 @@ $TTL 4h
 $ORIGIN wo-bisch.ch.
 
 @  1D  IN	 SOA ns1.nbit.ch. hostmaster.nbit.ch. (
-			      2024080901 ; serial
+			      2024080903 ; serial
 			      3H ; refresh
 			      120; retry
 			      2w ; expire
@@ -11,9 +11,9 @@ $ORIGIN wo-bisch.ch.
        IN  NS     ns1.nbit.ch.   ; Primary Nameserver
        IN  NS     ns2.nbit.ch.   ; Secondary Nameserver
 
-       IN  MX  10 mail.nbit.ch.  ; Mail Exchange
+       IN  MX  10 mx1.nbit.ch.  ; Mail Exchange
 
-       IN  TXT "v=spf1 mx a:onyx-dev.nbit.ch -all"
+       IN  TXT "v=spf1 mx a:mx1.nbit.ch a:mx2.nbit.ch -all"
 
        IN  TXT "google-site-verification=QetTfKzF08piZ9jYSUcTsnRKO8vyCaUrEafNq4rcqZM"