All Products
Search

This Product

    Direct Mail:Domain name configuration FAQs

    Document Center

    Direct Mail:Domain name configuration FAQs

    Last Updated:Jun 03, 2026

    Common questions about configuring sending domains in Direct Mail.

    What are the restrictions on setting up sending domains?

    • Each Alibaba Cloud account can add up to 5 sending domains. Use separate sending domains for transactional email and bulk email to isolate sender reputation.

    • Use a subdomain as your sending domain rather than your top-level domain (TLD). This prevents a poor sender reputation from affecting your root domain. Do not use a domain that already has Alibaba Mail enabled, as this can disrupt both sending and receiving. You can instead create a subdomain of your Alibaba Mail domain and use that as your Direct Mail sending domain.

    • A sending domain that has sender addresses attached to it cannot be deleted. Sending domains with no sender addresses can be deleted.

    • A top-level domain and all its subdomains can only be associated with one Alibaba Cloud account as a sending domain. If one account uses xxx.example.net as a sending domain in Direct Mail, no other account can use example.net or any of its subdomains—such as xxx.example.net, yyy.example.net, aaa.yyy.example.net, or bbb.aaa.yyy.example.net—as a sending domain.

    How to configure a sending domain on your DNS provider

    Log in to the Direct Mail console, add your sending domain, and complete domain verification. Once verified, Direct Mail generates the DNS record values you need to add.

    Then log in to your domain registrar's website and add each DNS record to your domain's configuration.

    For detailed steps, see: Configure a sender domain

    Can DNS records be modified after domain verification?

    No. Once your sending domain passes verification, do not modify or delete its DNS records. Doing so can cause emails to be rejected by receiving mail servers.

    Why would domain verification fail?

    Check that all required DNS records are correctly configured on your DNS provider and that the record values match exactly what Direct Mail shows.

    To troubleshoot:

    1. Verify that domain ownership verification, Sender Policy Framework (SPF), and Mail Exchange (MX) host records are all configured on your DNS provider with the correct record values.

    2. If you haven't configured them yet, see How do I configure a domain name on DNS servers?

    3. If verification fails with an error message, follow the instructions in that message.

    4. If you still need help, submit a ticket and include a complete screenshot of your sending domain configuration in Direct Mail and a complete screenshot of your DNS records at your DNS provider.

    Why are domain ownership verification, SPF verification, and MX record verification required?

    1. To prevent unauthorized users from using Direct Mail's email sending service on your behalf.

    2. To prevent others from registering the same sending domain on Direct Mail and sending emails that impersonate your account.

    3. To improve overall email deliverability.

    What is DKIM and how to configure DKIM records?

    DomainKeys Identified Mail (DKIM) is an email authentication protocol that uses cryptographic signatures to verify that an email was sent from the claimed domain and was not altered in transit.

    To set up DKIM records:

    1. Submit a ticket to request a DKIM record value for Direct Mail. Include your email sending scenario in the request to speed up approval. Alibaba Cloud will provide the record value within 1–3 business days.

    2. After receiving the record value, log in to the Alibaba Cloud DNS console and add a TXT record under your main domain. If your sending domain is the main domain itself, set the host record to default._domainkey.

    image

    1. To verify, run nslookup -qt=txt default._domainkey.xxx.example.net (replace xxx.example.net with your subdomain). A successful lookup returns the DKIM record value.

    What is DMARC and how to configure DMARC records?

    Domain-based Message Authentication, Reporting and Conformance (DMARC) prevents others from spoofing your sending domain and alerts you when spoofing attempts are detected.

    When a recipient's Mail Transfer Agent (MTA) supports DMARC, it validates incoming email against your DMARC policy. If validation fails, a report is sent to the inbox address specified in your DMARC record.

    To set up DMARC records:

    1. Confirm that the following SPF record is already set: v=spf1 include:spf1.dm.aliyun.com -all.

    2. Add the following DMARC record to your DNS provider:

      • Host record: _dmarc.xxx (replace xxx with the prefix of your subdomain)

      • Record value: TXT "v=DMARC1;p=none;rua=mailto:a@example.net;ruf=mailto:a@example.net"

    The p=none policy is the least restrictive—it monitors without taking action. Once you confirm no legitimate emails are failing DMARC, change p=none to p=quarantine to send failing emails to spam. If you receive attack reports indicating active spoofing, change to p=reject to block failing emails outright.

    Replace a***@example.net in the record value with any inbox where you can receive DMARC reports.

    image

    How long does DNS propagation take?

    DNS records typically take effect within 4 hours, with a maximum of 48 hours. Check your DNS provider's documentation for their specific propagation times.

    How to verify that DNS records have taken effect

    Run nslookup on Windows or dig on Linux to query your sending domain's DNS records.

    For detailed steps, see: Verify DNS configuration for your email domain

    What does "non-existent domain" mean when running dig or nslookup?

    Check the following:

    1. Confirm the sending domain has been verified in Direct Mail.

    2. Confirm DNS records are correctly configured, paying close attention to the host record name.