QnA Log Email Migration

Q: Why use a Custom MAIL FROM in AWS SES? A: To achieve [SPF] alignment. Without it, the technical routing sender does not match the visible sender, causing DMARC to fail.

Q: Why are two identical SPF records required? A: The root record (@) authorizes the visible “Header From”. The subdomain record (mail) authorizes the technical “Envelope From”. Both must pass for strict alignment.

Q: Why did test replies fail even though Port 25 was confirmed open? A: DNS propagation delay. Global DNS caches take time to update and were still routing mail to the old Workspace MX records.

Q: How can the 24-hour AWS Sandbox review be bypassed? A: Upgrade to AWS Business Support. Open a “System Impaired” technical chat and request immediate manual approval.

Q: What if the external telnet test on Port 25 fails? A: It indicates the local ISP is blocking inbound Port 25. This requires contacting the ISP to unblock the port or setting up an external inbound proxy.