Amazon SES SPF setup: custom MAIL FROM domain for DMARC alignment
Amazon SES SPF passes by default, but it does not align with DMARC unless you configure a custom MAIL FROM domain. Here is the exact setup.
Our blog shares expert insights on email security, DMARC configuration, and deliverability optimization.
Amazon SES SPF passes by default, but it does not align with DMARC unless you configure a custom MAIL FROM domain. Here is the exact setup.
Set up Amazon SES DKIM with Easy DKIM CNAMEs, understand when to pick BYODKIM or DEED, and avoid the per-region signing trap that breaks DMARC.
DMARC is now an IETF Standards Track protocol. RFC 9989, 9990, and 9991 replace RFC 7489 from 2015. Records still start with v=DMARC1, so most production deployments need nothing immediate. But the spec has real changes: new tags, the Public Suffix List is out, the p=reject guidance has flipped, and aggregate reports gained fields. Here is what changed and what to do about it.
A 2026 field guide to complaint feedback headers: Gmail Feedback-ID, Yahoo CFL enrollment, Microsoft SNDS/JMRP, Apple iCloud Mail, Comcast FBL, and RFC 9477 CFBL-Address.
An honest shortlist of the 6 best DMARC monitoring services in 2026. Compares DMARCTrust, Valimail, dmarcian, EasyDMARC, PowerDMARC, and DMARCLY on pricing, data residency, DNS monitoring, and what each one is genuinely good at.
Set up HubSpot DKIM by connecting an email sending domain, publishing two CNAME records, reviewing SPF and DMARC, and verifying authentication.
An MX record is the DNS entry that tells the rest of the internet which mail servers receive email for a domain. Here is how MX records work, what each field means, and why priority matters.
Phishing is broad impersonation. Spear phishing is targeted impersonation built around a specific person, role, vendor, or business process. Learn the difference, how executive phishing fits in, and where DMARC helps.
Set up DKIM for Office 365 and Microsoft 365 with selector CNAME records, the Defender portal, Exchange Online PowerShell checks, and DMARC alignment verification.
Three ways to look up MX records for any domain: a free MX records lookup tool, dig and nslookup from a terminal, and a few lines of Ruby or Python.
Seeing queued in Gmail usually means your message is waiting in the Outbox because Gmail cannot send it yet. Here are the common causes, safe fixes, and when to check SPF, DKIM, or DMARC.
Set up Mailchimp DKIM by verifying your domain, publishing Mailchimp's two CNAME records, adding DMARC, and checking authentication status.
Hire an email deliverability consultant who has shipped billions of emails. Free assessment, hands-on engagement, written quote before any work starts.
We use cookies to enhance your experience, analyze site traffic, and for marketing purposes. You can choose which cookies to allow. Learn more in our Cookie Policy.
Manage your cookie preferences below. Essential cookies are always active as they are required for the website to function.
Required for the website to function. Cannot be disabled.
Help us understand how visitors interact with our website.
Used to measure advertising effectiveness and show relevant ads.
Learn more about how we use cookies in our Cookie Policy.