Send as your own domain

On the Domains page, enter the part after the @ in the address you want to reply from. Waribox shows three CNAME records to add at your DNS host; they let us sign your mail for that domain (DKIM). Copy each name and value exactly.

New records can take a few hours to show up. We hold the domain for you for 72 hours; after that, if the records are still missing, another Waribox account could register it. Choose Check now to check straight away. Once the records are found the domain shows Ready.

Open the pipe, and under Your own address enter the address you publish, such as support at your domain.

At your email host, forward that address to the pipe’s Waribox address, which the pipe page shows with a copy button. This is how mail to your address reaches the team.

Tip: make it a forwarding-only address with no mailbox of its own. Then, if forwarding ever stops, senders get the usual “could not be delivered” message straight away instead of mail piling up where nobody looks.

The pipe page runs three quick tests. Each sends a test message and waits up to 15 minutes for it to arrive.

1. Mail to your address reaches this pipe. Proves the forwarding rule works. If it fails, check the rule, and look for “Waribox verification” in your spam folder.
2. Replies can go out as your address. Proves your domain’s records and DMARC policy accept our signature.
3. Contacts’ replies stay on your domain (optional). Checks whether your email host passes on addresses with a +tag. If it doesn’t, contacts see a mail.waribox.app Reply-To address. Everything still works.

Replies go out as your address once the first two tests pass. Until then they go out from the pipe’s Waribox address.

We check your domain’s records every hour. If they break, the domain shows a problem, and replies go out from the pipe’s Waribox address so nothing is rejected. When the records are back, we switch back on our own. Keep the three CNAME records in place: replies sent between a record’s removal and our next check may be rejected.

We email the account owner when sending from the domain is paused and when it’s back on. After 30 days of problems we turn sending from the domain off and stop checking it. Fix the records, then choose Check and turn on.

We also check the forwarding rule. See Forwarding checks.

By default only DKIM matches your domain. Turning on aligned bounces adds two records on a subdomain, bounce unless you choose another, so SPF matches your domain too. Sending works without it, and if these records break, sending carries on as before. If your DMARC record asks for strict SPF (aspf=s), a subdomain can’t help, and DKIM already covers you.