DNS & domains
Use a sending subdomain (mail.client.com)
Why agencies send from mail. or news. subdomains and how to verify them.
Why a subdomain
Most agencies authenticate mail.client.com or news.client.com instead of the apex client.com:
- Isolates email reputation from the corporate website domain
- Lets IT keep strict apex SPF while you own mail.* records
- Easier rollback if a campaign goes wrong
Recommended pattern
- Agree the subdomain with the client (
mail.is conventional). - In the provider (SES / SendGrid / Mailgun), verify that subdomain as the identity — not only the apex.
- Publish SPF, DKIM (and DMARC) on the subdomain per provider DNS UI.
- In EonMailer, set From addresses like
hello@mail.client.com(must match verified identity). - Align DMARC on the subdomain (or org-domain policy that covers it).
Apex vs subdomain
You can verify the apex if the client insists. Prefer subdomain unless they already send marketing from @client.com successfully.
DNS ownership
Someone with access to the DNS host must add CNAME/TXT records. Share the provider’s DNS table + our host-specific tips. Propagation is often minutes on Cloudflare; up to 48h elsewhere.