To send from your own domain, Limnn Mail registers the domain with Amazon SES (SESv2) and gives you DNS records to publish. These prove to receiving servers that mail claiming to be from you really is, which is what keeps it out of spam.
What gets created
- Easy DKIM: three CNAME records that let SES sign your mail.
- Custom MAIL FROM: an MX record and an SPF TXT record on bounce.<domain>, so bounces align with your domain.
- DMARC: a TXT record on _dmarc.<domain> that tells receivers how to treat mail that fails authentication.
Add and verify a domain
- 1Open /mail/admin as an administrator.
- 2Choose to add a domain and enter it, for example yourcompany.com. This runs provisionDomain and returns the DNS records.
- 3In your DNS host, create the three DKIM CNAMEs, the bounce.<domain> MX and SPF TXT, and the DMARC TXT exactly as shown.
- 4Return to Mail admin and refresh the domain status (refreshDomainStatus). Repeat until DKIM and MAIL FROM show as verified. DNS can take minutes to hours.
- 5Set the verified domain as the default (setDefaultDomain) so new user mailboxes are created on it.
Example records
<token1>._domainkey.yourcompany.com CNAME <token1>.dkim.amazonses.com
<token2>._domainkey.yourcompany.com CNAME <token2>.dkim.amazonses.com
<token3>._domainkey.yourcompany.com CNAME <token3>.dkim.amazonses.com
bounce.yourcompany.com MX 10 feedback-smtp.<region>.amazonses.com
bounce.yourcompany.com TXT "v=spf1 include:amazonses.com ~all"
_dmarc.yourcompany.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@yourcompany.com"Always copy the exact values Limnn shows you; the tokens and region above are placeholders. If your DNS host appends the domain automatically, enter only the host part of each name.
Sending behavior
- Mail sends through Amazon SES. Delivery, bounce and complaint events flow back to Limnn automatically.
- Limnn can route outbound mail through a secondary provider if needed; this is managed by Limnn and needs no change on your side.
- Bounced and complaining addresses are suppressed so you do not keep mailing them.
Protect your reputation
Start DMARC at p=none, read the reports, then tighten to quarantine or reject once legitimate senders all pass. Ramp volume gradually on a new domain, and honor suppression and unsubscribe lists.