DNS & domains

Use a sending subdomain (mail.client.com)

Why agencies send from mail. or news. subdomains and how to verify them.

Sending subdomain

Why a subdomain

Most agencies authenticate mail.client.com or news.client.com instead of the apex client.com:

  • Isolates email reputation from the corporate website domain
  • Lets IT keep strict apex SPF while you own mail.* records
  • Easier rollback if a campaign goes wrong
  1. Agree the subdomain with the client (mail. is conventional).
  2. In the provider (SES / SendGrid / Mailgun), verify that subdomain as the identity — not only the apex.
  3. Publish SPF, DKIM (and DMARC) on the subdomain per provider DNS UI.
  4. In EonMailer, set From addresses like hello@mail.client.com (must match verified identity).
  5. Align DMARC on the subdomain (or org-domain policy that covers it).

Apex vs subdomain

You can verify the apex if the client insists. Prefer subdomain unless they already send marketing from @client.com successfully.

DNS ownership

Someone with access to the DNS host must add CNAME/TXT records. Share the provider’s DNS table + our host-specific tips. Propagation is often minutes on Cloudflare; up to 48h elsewhere.

Next