Setting up a SPF domain/return path (custom MAIL FROM domain) for Amazon SES

You can set up a custom MAIL FROM domain for an entire domain, or for
individual email addresses. Please follow the below steps to configure custom
MAIL FROM domain for the Amazon SES.

  • Setting Up a MAIL FROM Domain for a Verified Domain
  • Setting Up a MAIL FROM Domain for a Verified Email Address

Setting Up a MAIL FROM Domain for a Verified Domain :

You can configure a MAIL FROM domain for an entire domain. When you do, all of the messages that you send from addresses on that domain use the same MAIL FROM domain.

To configure a verified domain to use a specified MAIL FROM domain

  1.  Open the Amazon SES console.
  2.  In the navigation pane, under Identity Management, choose Domains.
  3.  In the list of domains, confirm that the parent domain of the MAIL FROM domain is
    verified. If the domain isn’t verified, complete the procedures to verify the domain.
  4.  Under MAIL FROM Domain, choose Set MAIL FROM Domain.
  5.  On the Set MAIL FROM Domain window, do the following:

         a) For MAIL FROM domain, enter the subdomain that you want to use as the MAIL FROM domain.

         b) Choose Set MAIL FROM Domain. A window appears that contains the MX and SPF records that you have to add to your domain’s DNS configuration. These records use the formats shown in the following table.

Name Type Value
subdomain.domain.com MX 10 feedback-smtp.region.amazonses.com
subdomain.domain.com TXT “v=spf1 include:amazonses.com ~all”

         c) In the preceding records, replace subdomain.domain.com with your MAIL FROM subdomain, and replace region with the name of the AWS Region where you want to verify the MAIL FROM domain (such as us-west-2, us-east-1, or euwest-1). Note that the value of the TXT record has to include the quotation marks.

         d) Note these values, and then proceed to the next step.

     6. Publish an MX record to the DNS server of the custom MAIL FROM domain.
Procedure for updating the DNS records for your domain:

DNS provider Procedure
Route 53 If same account is used to managed
email using Amazon SES and Route 53,
then Use Route 53 to automatically
update the DNS settings for your
domain. Otherwise, we need to
complete the procedures shown
in Editing Records in the Amazon Route
53 Developer Guide
Other DNS providers Need to check with DNS provider
documentation

Note: To successfully set up a custom MAIL FROM domain with Amazon SES, you must publish exactly one MX record to the DNS server of your MAIL FROM domain. If the MAIL FROM domain has multiple MX records, the custom MAIL FROM setup with Amazon SES will fail.

Setting Up a MAIL FROM Domain for a Verified Email Address :

You can also set up a custom MAIL FROM domain for a specific email address. In order to set up a custom MAIL FROM domain for an email address, you have to be able to modify the DNS records for the domain that the email address is associated with.

Note: You can’t set up a custom MAIL FROM domain for addresses on a domain that you don’t own (For example, you can’t create a custom MAIL FROM domain for an address on the gmail.com domain, because you can’t add the necessary DNS records to the domain).

To configure a verified email address to use a specified MAIL FROM domain:

  1. Open the Amazon SES console.
  2.  In the navigation pane, under Identity Management, choose Email Addresses.
  3.  In the list of email addresses, confirm that the email address that you want to set up a custom MAIL FROM domain for is verified. If the email address isn’t verified, complete the procedures to verify the email address.
  4.  Under MAIL FROM Domain, choose Set MAIL FROM Domain.
  5.  On the Set MAIL FROM Domain window, do the following:

             a) For MAIL FROM domain, enter the subdomain that you want to use as the MAIL FROM domain.

             b) Choose Set MAIL FROM Domain. A window appears that contains the MX and SPF records that you have to add to the DNS configuration for the domain that the email address belongs to. These records use the formats shown in the following table.

Name Type Value
subdomain.domain.com MX 10 feedback-smtp.region.amazonses.com
subdomain.domain.com TXT “v=spf1 include:amazonses.com ~all”

            c) In the preceding records, replace subdomain.domain.com with your MAIL FROM subdomain, and replace region with the name of the AWS Region
where you want to verify the MAIL FROM domain (such as us-west-2, us-east-1,
or eu-west-1). Note that the value of the TXT record has to include the
quotation marks.
            d) Note these values, and then proceed to the next step.

     6. Publish the DNS records to the DNS server of the custom MAIL FROM domain.
Procedure for updating the DNS records for your domain:

DNS provider Procedure
Route 53 If same account is used to managed
email using Amazon SES and Route 53,
then Use Route 53 to automatically
update the DNS settings for your
domain. Otherwise, we need to
complete the procedures shown
in Editing Records in the Amazon Route
53 Developer Guide.
Other DNS providers Need to check with DNS provider
documentation

Note: To successfully set up a custom MAIL FROM domain with Amazon SES, you must publish exactly one MX record to the DNS server of your MAIL FROM domain. If the MAIL FROM domain has multiple MX records, the custom MAIL FROM setup with Amazon SES will fail.