Your sending domain: paths A, B and C

Postfaro never sends bulk email from the domain you use for everyday correspondence (for example yourcompany.com, where your team’s mailboxes live). If a campaign ever gets complaints, your invoices and replies to customers must not suffer.

So every Postfaro account sends from a separate sending domain. There are three ways to get one. In all three, the DNS of the sending domain ends up on Postfaro’s nameservers, so we can create and maintain every technical record for you: SPF, DKIM, DMARC, MX (for reply forwarding), and the return-path subdomain for bounces.

Nameserver names in this guide (ns1.postfaro.com, ns2.postfaro.com) are placeholders. Your panel always shows the exact values to use. [CONFIRM final nameserver host names.]

Which path is right for me?

In short: if you don’t want to touch DNS at all, choose A. If you already own a spare domain for this purpose, choose B. If you want the most recognisable sender and can add two DNS records, choose C.

Path A — A new domain registered through Postfaro

What you do:

1. In the order wizard, choose “Get a new domain” and search for a name (.com or .net). Names close to your brand work best, for example acme-news.com, acmemail.com or getacme.net. Don’t choose names that resemble other companies’ brands.

2. Pay for the Plan + domain bundle.

3. Confirm your email address. Domain rules (ICANN) require the domain owner’s email address to be verified. Within minutes you receive an email from our domain registrar partner [REGISTRAR NAME] — not from Postfaro — with a confirmation link. Click it. If it doesn’t arrive, use Resend in the wizard and check your spam folder.

   Important: if the address is not confirmed within 15 days, the registry suspends the domain and sending stops. We remind you on days 3, 7 and 12.

What we do: register the domain in your name (it’s yours), put its DNS on our nameservers from the start, create all records, and redirect the domain’s web address to your website (you choose where in the wizard and can change it later).

Setup continues in the background while you confirm the email; you do not need to wait.

Path B — A separate domain you already own

Use this if you have a domain that is not used for your team’s everyday email — for example one you bought for newsletters.

Important — do not use path B for a domain that has mailboxes people use. After the change, the domain’s mail (MX) points to Postfaro, which only forwards replies to your sender addresses. Any other mailbox on that domain would stop receiving email.

First: choose path B in the order wizard and pay for the plan. Your DNS zone on our nameservers is created right after payment.

Before you change anything:

1. Website records. If the domain has a website, note its records (usually an A record for the domain and a CNAME or A record for www). Open the DNS page of your Postfaro panel — your zone already exists there — and add the same website records. Otherwise the website goes offline after the switch.
2. Other records. Copy any verification TXT records you still need (for example for Google Search Console). Don’t copy old SPF, DKIM, DMARC or MX records — we manage those.
3. DNSSEC. If DNSSEC is enabled for the domain at your registrar, turn it off (remove the DS records) first and wait [24] hours. Otherwise the domain can stop resolving after the nameserver change. [CONFIRM whether Postfaro will support DNSSEC signing and provide DS records.]

The change — at your domain registrar (where you pay for the domain, e.g. GoDaddy, Namecheap, IONOS…):

1. Find Nameservers (sometimes “DNS servers” or “Name servers”) for the domain.
2. Choose custom nameservers and replace the existing ones with exactly these two:

ns1.postfaro.com
ns2.postfaro.com

3. Remove any other nameservers from the list and save.

What happens next: the wizard checks automatically and shows the progress (“1 of 2 nameservers found ✓”). Most changes are visible within an hour; some registries take up to 24–48 hours. As soon as both nameservers are detected, setup completes automatically.

If you haven’t completed the change, we remind you after 1, 3, 7 and 14 days.

Path C — A subdomain of your main domain

Your main domain stays exactly where it is. You only delegate one subdomain — for example news.acme.com — to Postfaro, by adding two NS records at the DNS provider of acme.com.

Choose the subdomain name. Good choices: news, mailing, info, campaign, updates. We do not suggest mail. by default, because it is often already used by mail servers. The wizard checks that the name you choose isn’t already in use.

First: choose path C in the order wizard, enter the subdomain and pay for the plan. The zone for the subdomain is created right after payment.

Before you add the records:

• Make sure no other record exists for that exact name (no A, CNAME, MX or TXT for news.acme.com). Delete any you find. A CNAME on the same name in particular blocks the delegation.
• If you later want a web page on news.acme.com, add it in the Postfaro DNS panel, not at your main DNS provider.

The records — at the DNS provider of your main domain (often your registrar, or a service like Cloudflare):

Add two records:

Some DNS panels want the full name in the Name field (news.acme.com) instead of just news. Some want a trailing dot after the value (ns1.postfaro.com.). Follow your provider’s format. In zone-file notation the result is:

news.acme.com.   3600   IN   NS   ns1.postfaro.com.
news.acme.com.   3600   IN   NS   ns2.postfaro.com.

What happens next: the wizard detects the records automatically (“1 of 2 records found ✓”), usually within minutes. When both are found, setup completes automatically. Reminders work as in path B.

Most DNS providers support NS records for subdomains — check yours before you buy. If it turns out yours does not let you add them, you can switch to another domain or subdomain you own on the domain page of your panel at no extra cost, or contact us to switch to path A.

Good to know about path C:

• Large mailbox providers look at your organisation’s domain as a whole (acme.com together with its subdomains). Google, for example, counts subdomain volume toward the main domain when deciding whether you are a “bulk sender”, and that status is permanent. In practice this means your main domain should also have correct SPF, DKIM and DMARC records for its own everyday email. Our free domain checker shows whether it does. We never change your main domain’s records — your IT provider or mail host does that.
• A campaign with poor results is technically isolated on the subdomain, but can still influence how providers see your company’s domain. If you want complete separation, choose path A or B.

What we create in your sending domain

You can see every record in the panel’s DNS page. Records the service depends on are locked; you can add your own website and verification records.

Wildcard (*) records are not allowed. Every change is logged.