Skip to content
SendPoint / Education
ESP setup

Amazon SES custom MAIL FROM

Configure the envelope sender domain and understand SPF alignment and fallback.

SendPoint referenceUpdated 2 min read

Why configure custom MAIL FROM?

SES uses an amazonses.com MAIL FROM domain by default. That can pass SPF without aligning SPF with your visible From domain. A custom MAIL FROM domain can provide relaxed SPF alignment when chosen appropriately. Aligned DKIM can independently satisfy DMARC.

Configure the verified identity

  1. Select the verified identity in the correct SES Region and configure a dedicated MAIL FROM subdomain according to SES restrictions.
  2. Publish the exact region-specific MX value shown by SES and the SPF TXT value at that MAIL FROM name. SES requires exactly one MX record for this purpose.
  3. Choose the behavior on MX failure: fall back to the default MAIL FROM domain or reject the send.
  4. Wait for the SES verification result, then inspect the envelope domain and authentication results on a new message.

SPF value for the dedicated MAIL FROM name

SES-documented TXT value
v=spf1 include:amazonses.com ~all

Use this value only at the intended SES MAIL FROM name. Obtain the region-specific MX target from the SES console.

Understand the failure choice

SendPoint recommendation: document the selected failure behavior with the stream owner and include it in incident reviews. Confirm that the MAIL FROM subdomain is reserved for this function and that other DNS changes cannot silently disrupt it.

Sources