How Icemail automates SPF, DKIM and DMARC — and replaces mailboxes for free
When you buy a domain and mailboxes through Icemail, the platform writes the email authentication records for you and lets you swap out a damaged mailbox at no cost. This article explains what happ…
When you buy a domain and mailboxes through Icemail, the platform writes the email authentication records for you and lets you swap out a damaged mailbox at no cost. This article explains what happens in the background and what you still need to do yourself.
Steps
- In Icemail, add a domain (buy it, or connect one you own) and add mailboxes to it. Icemail performs the technical setup in the background.
- Icemail publishes the authentication records for the domain: SPF, DKIM and DMARC. You do not enter these at a registrar.
- If a mailbox stops performing, replace it from the Icemail dashboard. Replacements are unlimited and free, so campaigns keep running without a fresh purchase.
- Connect the infrastructure to your outreach tool. In OutreachFox this is Mailbox → Connect Mailbox → Import from Icemail.
What Icemail configures for you
| **Record** | **What it does** | **What Icemail sets** |
| SPF (TXT) | Lists the servers allowed to send for the domain | Include for the mailbox provider you bought (Google, Microsoft, Azure or Icemail SMTP) |
| DKIM (TXT/CNAME) | Cryptographically signs each message so the receiver can confirm it was not altered | Provider selector and public key |
| DMARC (TXT at \_dmarc) | Tells receivers what to do when SPF/DKIM fail and where to send reports | A valid policy record so Gmail/Yahoo bulk-sender rules are met |
| MX | Where inbound mail for the domain is delivered | Provider MX so replies and bounces reach the mailbox |
If you connected a domain you already own, Icemail can only write these records when the domain's nameservers point at Icemail. If you keep DNS at your registrar, add the records yourself — see SPF, DKIM and DMARC: what they are and how to check yours.
Why this matters
Gmail, Yahoo and Microsoft reject or junk mail from domains that fail authentication. Since 2024, bulk senders must pass SPF and DKIM and publish DMARC. A single missing or malformed record can send an entire domain's traffic to spam. Automating the setup removes the most common cause of day-one deliverability failure.
Free mailbox replacement
A mailbox is "burned" when its reputation has dropped so far that warm-up cannot recover it: spam placement stays high for a week or more, or the provider suspends it. Rather than buying a new account:
- In Icemail, open the domain and locate the affected mailbox.
- Request a replacement. Icemail deletes the old account and provisions a new one on the same domain.
- Re-import into OutreachFox (Mailbox → Connect Mailbox → Import from Icemail) and enable warm-up on the new mailbox.
Replacing the mailbox does not reset the domain's reputation. If the whole domain is blacklisted, replace the domain instead.
Tips
- Even with automatic setup, verify records once after purchase using a free DNS lookup tool. Look for one SPF record (not two), a DKIM selector that resolves, and a DMARC record at _dmarc.yourdomain.com.
- Do not add a second SPF record manually. Two SPF records is a permanent fail.
- Start DMARC at p=none and move to p=quarantine after a few weeks of clean reports. Icemail lets you set or remove DMARC per domain.
Troubleshooting
- Records show as missing after purchase. DNS propagation can take up to 24–48 hours. Check again later.
- You connected an existing domain and records are missing. Confirm the nameservers at your registrar match Icemail's nameservers.
- DKIM fails after moving mailboxes between providers. The DKIM selector is provider-specific. Re-provision the DNS records in Icemail for the new provider.
Related articles
- What is Icemail? OutreachFox's built-in mailbox marketplace
- SPF, DKIM and DMARC: what they are and how to check yours
- Adding DNS records at Cloudflare, GoDaddy, Namecheap and Porkbun
- Import your Icemail mailboxes into OutreachFox
- Troubleshooting warmup (paused, low health score, high spam pl
Was this helpful?