Q: What is Forward Email's history?

You can learn more about Forward Email on our About page .

Q: Mobile Devices

For iOS: Go to Settings → Mail → Accounts → Add Account → Other Tap Add Mail Account and enter your details For server settings, use the same IMAP and SMTP settings as above For Android: Go to Settings → Accounts → Add Account → Personal (IMAP) Enter your Forward Email address and password For server settings, use the same IMAP and SMTP settings as above

Question 1

What is Forward Email?

Accepted Answer

Note

Forward Email is perfect for individuals, small businesses, and developers who want professional email addresses without the cost and maintenance of a full email hosting solution.

Forward Email is a fully featured email service provider and email hosting provider for custom domain names.

It's the only free and open-source service, and lets you use custom domain email addresses without the complexity of setting up and maintaining your own email server.

Our service forwards emails sent to your custom domain to your existing email account – and you can even use us as your dedicated email hosting provider.

Key features of Forward Email:

Custom Domain Email: Use professional email addresses with your own domain name
Free Tier: Basic email forwarding at no cost
Enhanced Privacy: We don't read your emails or sell your data
Open Source: Our entire codebase is available on GitHub
SMTP, IMAP, and POP3 Support: Full email sending and receiving capabilities
End-to-End Encryption: Support for OpenPGP/MIME
Custom Catch-All Aliases: Create unlimited email aliases

You can compare us to 56+ other email service providers on our Email Comparison page.

Tip

Learn more about Forward Email by reading our free Technical Whitepaper

Question 2

Who uses Forward Email?

Accepted Answer

We provide email hosting and email forwarding service to 500,000+ domains and these notable users:

Customer Case Study U.S. Naval Academy :page_facing_up: Case Study Canonical :page_facing_up: Case Study Netflix Games The Linux Foundation :page_facing_up: Case Study The PHP Foundation Fox News Radio Disney Ad Sales jQuery :page_facing_up: Case Study LineageOS Ubuntu :page_facing_up: Case Study Kubuntu :page_facing_up: Case Study Lubuntu :page_facing_up: Case Study The University of Cambridge :page_facing_up: Case Study The University of Maryland :page_facing_up: Case Study The University of Washington :page_facing_up: Case Study Tufts University :page_facing_up: Case Study Swarthmore College :page_facing_up: Case Study Government of South Australia Government of Dominican Republic Fly.io RCD Hotels Isaac Z. Schlueter (npm) :page_facing_up: Case Study David Heinemeier Hansson (Ruby on Rails)

Question 3

What is Forward Email's history?

Accepted Answer

You can learn more about Forward Email on our About page.

Question 4

How fast is this service?

Accepted Answer

Note

Our system is designed for speed and reliability, with multiple redundant servers to ensure your emails are delivered promptly.

Forward Email delivers messages with minimal delay, typically within seconds of receipt.

Performance metrics:

Average Delivery Time: Less than 5-10 seconds from receipt to forwarding (see our Time to Inbox "TTI" monitoring page)
Uptime: 99.9%+ service availability
Global Infrastructure: Servers strategically located for optimal routing
Automatic Scaling: Our system scales during peak email periods

We operate in real-time, unlike other providers which rely upon delayed queues.

We do not write to disk or store logs – with the exception of errors and outbound SMTP (see our Privacy Policy).

Everything is done in-memory and our source code is on GitHub.

Question 5

Thunderbird

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open Thunderbird and go to Edit → Account Settings → Account Actions → Add Mail Account
Enter your name, Forward Email address, and password
Click Configure manually and enter:
- Incoming: IMAP, imap.forwardemail.net, port 993, SSL/TLS
- Outgoing: SMTP, smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
Click Done

Question 6

Microsoft Outlook

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to File → Add Account
Enter your Forward Email address and click Connect
Choose Advanced options and select Let me set up my account manually
Select IMAP and enter:
- Incoming: imap.forwardemail.net, port 993, SSL
- Outgoing: smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
- Username: Your full email address
- Password: Your generated password
Click Connect

Question 7

Apple Mail

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to Mail → Preferences → Accounts → +
Select Other Mail Account
Enter your name, Forward Email address, and password
For server settings, enter:
- Incoming: imap.forwardemail.net
- Outgoing: smtp.forwardemail.net
- Username: Your full email address
- Password: Your generated password
Click Sign In

Question 8

eM Client

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open eM Client and go to Menu → Accounts → + Add Account
Click on Mail and then select Other
Enter your Forward Email address and click Next
Enter the following server settings:
- Incoming server: imap.forwardemail.net
- Outgoing server: smtp.forwardemail.net
Enter your full email address as the User name and your generated password as the Password for both incoming and outgoing servers.
eM Client will test the connection. Once it passes, click Next.
Enter your name and choose an account name.
Click Finish.

Question 9

Mobile Devices

Accepted Answer

For iOS:

Go to Settings → Mail → Accounts → Add Account → Other
Tap Add Mail Account and enter your details
For server settings, use the same IMAP and SMTP settings as above

For Android:

Go to Settings → Accounts → Add Account → Personal (IMAP)
Enter your Forward Email address and password
For server settings, use the same IMAP and SMTP settings as above

Question 10

Sendmail SMTP Relay Configuration

Accepted Answer

You can configure Sendmail to relay emails through Forward Email's SMTP servers. This is a common setup for legacy systems or applications that rely on Sendmail.

Estimated Setup Time: Less than 20 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Edit your sendmail.mc file, typically located at /etc/mail/sendmail.mc:
sudo nano /etc/mail/sendmail.mc
Add the following lines to define the smart host and authentication:
define(`SMART_HOST', `smtp.forwardemail.net')dnl define(`RELAY_MAILER_ARGS', `TCP $h 465')dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl FEATURE(`authinfo',`hash -o /etc/mail/authinfo.db')dnl
Create the authentication file /etc/mail/authinfo:
sudo nano /etc/mail/authinfo
Add your Forward Email credentials to the authinfo file:
AuthInfo:smtp.forwardemail.net "U:your-alias@yourdomain.com" "P:your-generated-password" "M:PLAIN"
Generate the authentication database and secure the files:
sudo makemap hash /etc/mail/authinfo < /etc/mail/authinfo sudo chmod 600 /etc/mail/authinfo /etc/mail/authinfo.db
Rebuild the Sendmail configuration and restart the service:
sudo make -C /etc/mail sudo systemctl restart sendmail

Testing

Send a test email to verify the configuration:

echo "Test email from Sendmail" | mail -s "Sendmail Test" recipient@sample.g0v.tw

Question 11

Exim4 SMTP Relay Configuration

Accepted Answer

Exim4 is a popular MTA on Debian-based systems. You can configure it to use Forward Email as a smarthost.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Run the Exim4 configuration tool:
sudo dpkg-reconfigure exim4-config
Select the following options:
- General type of mail configuration: mail sent by smarthost; received via SMTP or fetchmail
- System mail name: your.hostname
- IP-addresses to listen on for incoming SMTP connections: 127.0.0.1 ; ::1
- Other destinations for which mail is accepted: (leave blank)
- Domains to relay mail for: (leave blank)
- IP address or host name of the outgoing smarthost: smtp.forwardemail.net::465
- Hide local mail name in outgoing mail? No
- Keep number of DNS-queries minimal (Dial-on-Demand)? No
- Delivery method for local mail: Mbox format in /var/mail/
- Split configuration into small files? No
Edit the passwd.client file to add your credentials:
sudo nano /etc/exim4/passwd.client
Add the following line:
smtp.forwardemail.net:your-alias@yourdomain.com:your-generated-password
Update the configuration and restart Exim4:
sudo update-exim4.conf sudo systemctl restart exim4

Testing

Send a test email:

echo "Test from Exim4" | mail -s "Exim4 Test" recipient@sample.g0v.tw

Question 12

msmtp SMTP Client Configuration

Accepted Answer

msmtp is a lightweight SMTP client that's useful for sending emails from scripts or command-line applications.

Estimated Setup Time: Less than 10 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Create or edit the msmtp configuration file at ~/.msmtprc:
nano ~/.msmtprc
Add the following configuration:
defaults auth on tls on tls_trust_file /etc/ssl/certs/ca-certificates.crt logfile ~/.msmtp.log account forwardemail host smtp.forwardemail.net port 465 tls_starttls off from your-alias@yourdomain.com user your-alias@yourdomain.com password your-generated-password account default : forwardemail
Set the correct permissions for the configuration file:
chmod 600 ~/.msmtprc

Testing

Send a test email:

echo "This is a test email from msmtp" | msmtp -a default recipient@sample.g0v.tw

Question 13

Command-line Email Clients

Accepted Answer

Popular command-line email clients like Mutt, NeoMutt, and Alpine can be configured to use Forward Email's SMTP servers for sending mail. The configuration will be similar to the msmtp setup, where you provide the SMTP server details and your credentials in the respective configuration files (.muttrc, .neomuttrc, or .pinerc).

Question 14

Windows Email Configuration

Accepted Answer

For Windows users, you can configure popular email clients like Microsoft Outlook and eM Client using the IMAP and SMTP settings provided in your Forward Email account. For command-line or scripting use, you can use PowerShell's Send-MailMessage cmdlet (though it is considered obsolete) or a lightweight SMTP relay tool like E-MailRelay.

Question 15

Postfix SMTP Relay Configuration

Accepted Answer

You can configure Postfix to relay emails through Forward Email's SMTP servers. This is useful for server applications that need to send emails.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Installation

Install Postfix on your server:

Question 16

How to Send Mail As using Gmail?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds").
When prompted for "Email address", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.forwardemail.net and change the port to 465
When prompted for "Username", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
When prompted for "Password", paste the password from Generate Password in step 3 above
Select the radio button for "Secured connection using SSL"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Congratulations! You've successfully completed all steps.

Question 17

What is the legacy free guide for Send Mail As using Gmail?

Accepted Answer

Important: This legacy free guide is deprecated as of May 2023 since we now support outbound SMTP. If you use the guide below, then this will cause your outbound email to say "via forwardemail dot net" in Gmail.

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

You need to have [Gmail's Two-Factor Authentication][gmail-2fa] enabled for this to work. Visit https://www.google.com/landing/2step/ if you do not have it enabled.
Once Two-Factor Authentication is enabled (or if you already had it enabled), then visit https://myaccount.google.com/apppasswords.
When prompted for "Select the app and device you want to generate the app password for":
Copy the password to your clipboard that is automatically generated

Important: If you are using G Suite, visit your admin panel Apps G Suite Settings for Gmail Settings and make sure to check "Allow users to send mail through an external SMTP server...". There will be some delay for this change to be activated, so please wait a few minutes.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds")
When prompted for "Email address", enter the email address with the custom domain you used above (e.g. hello@sample.g0v.tw)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.gmail.com and leave the port as 587
When prompted for "Username", enter the portion of your Gmail address without the gmail.com part (e.g. just "user" if my email is user@gmail.com)

Important: If the "Username" portion is autofilled, then you will need to change this to the username portion of your Gmail address instead.
When prompted for "Password", paste from your clipboard the password you generated in step 2 above
Leave the radio button checked for "Secured connection using TLS"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Question 18

Advanced Gmail Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

If you want to set up advanced routing in Gmail so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges, follow these steps:

Log in to your Google Admin console at admin.google.com
Go to Apps → Google Workspace → Gmail → Routing
Click on Add Route and configure the following settings:

Single Recipient Settings:

Select "Change envelope recipient" and enter your primary Gmail address
Check "Add X-Gm-Original-To header with original recipient"

Envelope Recipient Patterns:

Add a pattern that matches all non-existent mailboxes (e.g., .*@yourdomain.com)

Email Server Settings:

Select "Route to host" and enter mx1.forwardemail.net as the primary server
Add mx2.forwardemail.net as the backup server
Set port to 25
Select "Require TLS" for security

Click Save to create the route

Important: This configuration will only work for Google Workspace accounts with custom domains, not for regular Gmail accounts.

Question 19

Advanced Outlook Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

For Microsoft 365 (formerly Office 365) users who want to set up advanced routing so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges:

Log in to the Microsoft 365 admin center at admin.microsoft.com
Go to Exchange → Mail flow → Rules
Click Add a rule and select Create a new rule
Name your rule (e.g., "Forward non-existent mailboxes to Forward Email")
Under Apply this rule if, select:
- "The recipient address matches..."
- Enter a pattern that matches all addresses at your domain (e.g., *@yourdomain.com)
Under Do the following, select:
- "Redirect the message to..."
- Choose "The following mail server"
- Enter mx1.forwardemail.net and port 25
- Add mx2.forwardemail.net as a backup server
Under Except if, select:
- "The recipient is..."
- Add all your existing mailboxes that should not be forwarded
Set the rule priority to ensure it runs after other mail flow rules
Click Save to activate the rule

Question 20

Why am I not receiving my test emails?

Accepted Answer

If you're sending a test email to yourself, then it may not show up in your inbox because it has the same "Message-ID" header.

This is a widely known issue, and also affects services such as Gmail. Here is the official Gmail answer regarding this issue.

If you continue to have issues, then it is most likely to be an issue with DNS propagation. You will need to wait a bit longer and try again (or try setting a lower TTL value on your TXT records).

Still having issues? Please contact us so we can help investigate the issue and find a quick resolution.

Question 21

How do I configure my email client to work with Forward Email?

Accepted Answer

Our service works with popular email clients such as:

Your username is your alias' email address and password is from Generate Password ("Normal Password").

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".

Type Hostname Protocol Ports IMAP imap.forwardemail.net SSL/TLS Preferred 993 and 2993 SMTP smtp.forwardemail.net SSL/TLS Recommended 465 and 2465 for SSL/TLS (recommended) or 587, 2587, 2525, and 25 for STARTTLS

Question 22

Why are my emails landing in Spam and Junk and how can I check my domain reputation?

Accepted Answer

This section guides you if your outbound mail is using our SMTP servers (e.g. smtp.forwardemail.net) (or forwarded via mx1.forwardemail.net or mx2.forwardemail.net) and it is being delivered in the Spam or Junk folder of recipients.

We routinely monitor our IP addresses against all reputable DNS denylists, therefore it is most likely a domain-reputation specific issue.

Emails can land in spam folders for several reasons:

Missing Authentication: Set up SPF, DKIM, and DMARC records.
Domain Reputation: New domains often have neutral reputation until they establish a sending history.
Content Triggers: Certain words or phrases can trigger spam filters.
Sending Patterns: Sudden increases in email volume can look suspicious.

You can try to use one or more of these tools to check your domain's reputation and categorization:

Reputation and Blocklist Check Tools

Tool Name URL Type Cloudflare Domain Categorization Feedback https://radar.cloudflare.com/domains/feedback Categorization Spamhaus IP and Domain Reputation Checker https://check.spamhaus.org/ DNSBL Cisco Talos IP and Domain Reputation Center https://talosintelligence.com/reputation_center Reputation Barracuda IP and Domain Reputation Lookup https://www.barracudacentral.org/lookups/lookup-reputation DNSBL MX Toolbox Blacklist Check https://mxtoolbox.com/blacklists.aspx Blacklist Google Postmaster Tools https://www.gmail.com/postmaster/ Reputation Yahoo Sender Hub https://senders.yahooinc.com/ Reputation MultiRBL.valli.org Blacklist Check https://multirbl.valli.org/lookup/ DNSBL Sender Score https://senderscore.org/act/blocklist-remover/ Reputation Invaluement https://www.invaluement.com/lookup/ DNSBL SURBL https://www.surbl.org/ DNSBL SpamCop https://www.spamcop.net/bl.shtml DNSBL UCEPROTECT's Levels 1, 2, and 3 https://www.uceprotect.net/en/rblcheck.php DNSBL UCEPROTECT's backscatterer.org https://www.backscatterer.org/ Backscatter Protection UCEPROTECT's whitelisted.org https://www.whitelisted.org/ (requires a fee) DNSWL

IP Removal Request Forms by Provider

If your IP address has been blocked by a specific email provider, use the appropriate removal form or contact below:

Provider Removal Form / Contact Notes Google/Gmail https://support.google.com/mail/contact/bulk_send_new Bulk sender contact form Microsoft (Outlook/Office 365/Hotmail) https://sender.office.com Office 365 IP delist portal Yahoo/AOL/Verizon https://senders.yahooinc.com/ Yahoo Sender Hub Apple/iCloud https://ipcheck.proofpoint.com/ Apple uses Proofpoint for IP reputation Proofpoint https://ipcheck.proofpoint.com/ Proofpoint IP check and removal Barracuda Networks https://www.barracudacentral.org/lookups/lookup-reputation Barracuda reputation lookup and removal Cloudmark https://csi.cloudmark.com/en/reset/ Cloudmark CSI reset request GoDaddy/SecureServer https://unblock.secureserver.net GoDaddy IP unblock request form Comcast/Xfinity https://spa.xfinity.com/report Comcast IP removal request Charter/Spectrum https://www.spectrum.net/support/internet/understanding-email-error-codes Contact Spectrum support for removal AT&T abuse_rbl@abuse-att.net Email for removal request Cox Communications unblock.request@cox.net Email for removal request CenturyLink/Lumen abuse@centurylink.com Uses Cloudfilter Windstream abuse@windstream.net Email for removal request t-online.de (Germany) tobr@rx.t-online.de Email for removal request Orange France https://postmaster.orange.fr/ Use contact form or email abuse@orange.fr GMX https://postmaster.gmx.net/en/contact GMX postmaster contact form Mail.ru https://postmaster.mail.ru/ Mail.ru postmaster portal Yandex https://postmaster.yandex.ru/ Yandex postmaster portal QQ Mail (Tencent) https://open.mail.qq.com/ QQ Mail whitelist application (Chinese) Netease (163.com) https://mail.163.com/postmaster/ Netease postmaster portal Alibaba/Aliyun/HiChina https://www.alibabacloud.com/help/en/alibaba-mail/ Contact via Alibaba Cloud console Amazon SES https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html AWS SES console > Blacklist Removal SendGrid https://support.sendgrid.com/ Contact SendGrid support Mimecast https://community.mimecast.com/ Uses third-party RBLs - contact specific RBL Fastmail https://www.fastmail.com/support/ Contact Fastmail support Zoho https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address Contact Zoho support ProtonMail https://proton.me/support/contact Contact Proton support Tutanota https://tutanota.com/support Contact Tutanota support Hushmail https://www.hushmail.com/support/ Contact Hushmail support Mailbox.org https://mailbox.org/en/support Contact Mailbox.org support Posteo https://posteo.de/en/site/contact Contact Posteo support DuckDuckGo Email https://duckduckgo.com/email/support Contact DuckDuckGo support Sonic.net https://www.sonic.com/support Contact Sonic support Telus https://www.telus.com/en/support Contact Telus support Vodafone Germany https://www.vodafone.de/hilfe/ Contact Vodafone support Xtra (Spark NZ) https://www.spark.co.nz/help/ Contact Spark NZ support UOL/BOL (Brazil) https://ajuda.uol.com.br/ Contact UOL support (Portuguese) Libero (Italy) https://aiuto.libero.it/ Contact Libero support (Italian) Telenet (Belgium) https://www2.telenet.be/en/support/ Contact Telenet support Facebook/WhatsApp https://www.facebook.com/business/help Contact Facebook business support LinkedIn https://www.linkedin.com/help/linkedin Contact LinkedIn support Groups.io https://groups.io/helpcenter Contact Groups.io support Earthlink/Vade Secure https://sendertool.vadesecure.com/en/ Vade Secure sender tool Cloudflare Email Security https://www.cloudflare.com/products/zero-trust/email-security/ Contact Cloudflare support Hornetsecurity/Expurgate https://www.hornetsecurity.com/ Contact Hornetsecurity support SpamExperts/Antispamcloud https://www.spamexperts.com/ Contact via hosting provider Mail2World https://www.mail2world.com/support/ Contact Mail2World support

Tip

Start with a low volume of high-quality emails to build a positive reputation before sending in larger volumes.

Important

If your domain is on a blacklist, each blacklist has its own removal process. Check their websites for instructions.

Tip

If you need additional help or find that we are false-positive listed as spam by a certain email service provider, then please contact us.

Question 23

What should I do if I receive spam emails?

Accepted Answer

You should unsubscribe from the emailing list (if possible) and block the sender.

Please do not report the message as spam, but instead forward it to our manually curated and privacy-focused abuse prevention system.

The email address to forward spam to is: abuse@forwardemail.net

Question 24

Why are my test emails sent to myself in Gmail showing as "suspicious"?

Accepted Answer

If you see this error message in Gmail when you send a test to yourself, or when a person you're emailing with your alias sees an email from you for the first time, then please do not worry – as this is a built-in safety feature of Gmail.

You can simply click "Looks safe". For example, if you were to send a test message using the send mail as feature (to someone else), then they will not see this message.

However if they do see this message, it's because they were normally used to seeing your emails come from john@gmail.com instead of john@customdomain.com (just an example). Gmail will alert the users just to make sure things are safe just in case, there is no workaround.

Question 25

Can I remove the via forwardemail dot net in Gmail?

Accepted Answer

This topic is related to a widely known issue in Gmail where extra info appears next to a sender's name.

As of May 2023 we support sending email with SMTP as an add-on for all paid users – which means that you can remove the via forwardemail dot net in Gmail.

Note that this FAQ topic is specific for those using the How to Send Mail As using Gmail feature.

Please see the section on Do you support sending email with SMTP for configuration instructions.

Question 26

Where are your servers located?

Accepted Answer

Tip

We may soon announce our EU datacenter location hosted under forwardemail.eu. Subscribe to the discussion at https://github.com/orgs/forwardemail/discussions/336 for updates.

Our servers are located primarily in Denver, Colorado – see https://forwardemail.net/ips for our complete list of IP addresses.

You can learn about our subprocessors on our GDPR, DPA, and Privacy pages.

Question 27

How do I export and backup my mailbox?

Accepted Answer

At anytime you can export your mailboxes as EML, Mbox, or encrypted SQLite formats.

Go to My Account Domains Aliases Download Backup and select your preferred export format type.

You will be emailed a link to download the export once it has finished.

Note that this export download link expires after 4 hours for security concerns.

If you need to inspect your exported EML or Mbox formats, then these open-soruce tools may be useful:

Name Format Platform GitHub URL MBox Viewer Mbox Windows https://github.com/eneam/mboxviewer mbox-web-viewer Mbox All platforms https://github.com/PHMRanger/mbox-web-viewer EmlReader EML Windows https://github.com/ayamadori/EmlReader Email viewer EML VSCode https://github.com/joelharkes/vscode_email_viewer eml-reader EML All platforms https://github.com/s0ph1e/eml-reader

Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Question 28

How do I import and migrate my existing mailbox?

Accepted Answer

You can easily import your email to Forward Email (e.g. using Thunderbird) with the instructions below:

Important: You must follow all of the following steps in order to import your existing email.

Export your email from your existing email provider:
Email Provider Export Format Export Instructions Gmail MBOX https://takeout.google.com/settings/takeout/custom/gmail Outlook PST
Tip: If you are using Outlook (PST export format), then you could simply follow the instructions under "Other" below. However we have provided links below to convert PST to MBOX/EML format based off your operating system:
Apple Mail MBOX https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974 Fastmail EML https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail Proton Mail MBOX/EML https://proton.me/support/export-emails-import-export-app Tutanota EML https://github.com/crepererum-oss/tatutanatata Gandi EML https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents Zoho EML https://www.zoho.com/mail/help/import-export-emails.html#alink2 Other Use Thunderbird Set up your existing email account in Thunderbird and then use the ImportExportTools NG plugin to export and import your email. You may also be able to simply copy/paste or drag/drop emails between one account to another.
Download, install, and open Thunderbird.
Create a new account using your alias' full email address (e.g. you@yourdomain.com) and your generated password. If you do not yet have a generated password, then refer to our setup instructions.
Download and install the ImportExportTools NG Thunderbird plugin.
Create a new local folder in Thunderbird, and then right click on it → select the ImportExportTools NG option → choose Import mbox file (for MBOX export format) – or – Import messages / Import all messages from a directory (for EML export format).
Drag/drop from the local folder to a new (or existing) IMAP folder in Thunderbird you wish to upload messages to in IMAP storage with our service. This will ensure they are backed up online with our SQLite encrypted storage.

Tip: If you are confused as to how to import into Thunderbird, then you can refer to official instructions at https://kb.mozillazine.org/Importing_folders and https://github.com/thunderbird/import-export-tools-ng/wiki.

Important: Once you have completed the export and import process, then you may also want to enable forwarding on your existing email account and set up an auto-responder to notify senders that you have a new email address (e.g. if you were previously using Gmail and are now using an email with your custom domain name).

Congratulations! You've successfully completed all steps.

Question 29

How do I use my own S3-compatible storage for backups?

Accepted Answer

Paid plan users can configure their own S3-compatible storage provider on a per-domain basis for IMAP/SQLite backups. This means your encrypted mailbox backups can be stored on your own infrastructure instead of (or in addition to) our default storage.

Supported providers include Amazon S3, Cloudflare R2, MinIO, Backblaze B2, DigitalOcean Spaces, and any other S3-compatible service.

Setup

Create a private bucket with your S3-compatible provider. The bucket must not be publicly accessible.
Create access credentials (access key ID and secret access key) with read/write permissions to the bucket.
Go to My Account Domains Advanced Settings Custom S3-Compatible Storage.
Check "Enable custom S3-compatible storage" and fill in your endpoint URL, access key ID, secret access key, region, and bucket name.
Click "Test Connection" to verify your credentials, bucket access, and write permissions.
Click "Save" to apply the settings.

How Backups Work

Backups are triggered automatically for every connected IMAP alias. The IMAP server checks all active connections once per hour and dispatches a backup for each connected alias. A Redis-based lock prevents duplicate backups from running within 30 minutes of each other, and the actual backup is skipped if a successful backup was already completed within the last 24 hours (unless the backup was explicitly requested by a user for download).

Backups can also be triggered manually by clicking "Download Backup" for any alias in the dashboard. Manual backups always run regardless of the 24-hour window.

The backup process works as follows:

The SQLite database is copied using VACUUM INTO, which creates a consistent snapshot without interrupting active connections and preserves the database encryption.
The backup file is verified by opening it to confirm encryption is still valid.
A SHA-256 hash is computed and compared against the existing backup in storage. If the hash matches, the upload is skipped (no changes since last backup).
The backup is uploaded to S3 using multipart upload via the @aws-sdk/lib-storage library.
A signed download URL (valid for 4 hours) is generated and emailed to the user.

Backup Formats

Three backup formats are supported:

Format Extension Description sqlite .sqlite Raw encrypted SQLite database snapshot (default for automatic IMAP backups) mbox .zip Password-protected ZIP containing mailbox in mbox format eml .zip Password-protected ZIP containing individual .eml files per message

Tip: If you have .sqlite backup files and want to convert them to .eml files locally, use our standalone CLI tool convert-sqlite-to-eml. It works on Windows, Linux, and macOS and does not require a network connection.

File Naming and Key Structure

When using custom S3 storage, backup files are stored with an ISO 8601 timestamp prefix so that each backup is preserved as a separate object. This gives you a full backup history in your own bucket.

The key format is:

{ISO 8601 timestamp}-{alias_id}.{extension}

For example:

2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite 2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.zip 2025-03-02T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite

The alias_id is the MongoDB ObjectId of the alias. You can find it in the alias settings page or via the API.

When using the default (system) storage, the key is flat (e.g. 65a31c53c36b75ed685f3fda.sqlite) and each backup overwrites the previous one.

Note: Since custom S3 storage retains all backup versions, storage usage will grow over time. We recommend configuring lifecycle rules on your bucket to automatically expire old backups (e.g. delete objects older than 30 or 90 days).

Data Ownership and Deletion Policy

Your custom S3 bucket is entirely under your control. We never delete or modify files in your custom S3 bucket — not when an alias is deleted, not when a domain is removed, and not during any cleanup operations. We only write new backup files to your bucket.

This means:

Alias deletion — When you delete an alias, we remove the backup from our default system storage only. Any backups previously written to your custom S3 bucket remain untouched.
Domain removal — Removing a domain does not affect files in your custom bucket.
Retention management — You are responsible for managing storage in your own bucket, including configuring lifecycle rules to expire old backups.

If you disable custom S3 storage or switch back to our default storage, existing files in your bucket are preserved. Future backups will simply be written to our default storage instead.

Security

Your access key ID and secret access key are encrypted at rest using AES-256-GCM before being stored in our database. They are only decrypted at runtime when performing backup operations.
We automatically validate that your bucket is not publicly accessible. If a public bucket is detected, the configuration will be rejected on save. If public access is detected at backup time, we fall back to our default storage and notify all domain administrators by email.
Credentials are validated on save via a HeadBucket call to ensure the bucket exists and credentials are correct. If validation fails, custom S3 storage is automatically disabled.
Each backup file includes a SHA-256 hash in its S3 metadata, which is used to detect unchanged databases and skip redundant uploads.

Error Notifications

If a backup fails when using your custom S3 storage (e.g. due to expired credentials or a connectivity issue), all domain administrators will be notified by email. These notifications are rate-limited to once every 6 hours to prevent duplicate alerts. If your bucket is detected as publicly accessible at backup time, administrators will be notified once daily.

API

You can also configure custom S3 storage via the API:

curl -X PUT https://api.forwardemail.net/v1/domains/sample.g0v.tw \ -u API_TOKEN: \ -d has_custom_s3=true \ -d s3_endpoint=https://s3.us-east-1.amazonaws.com \ -d s3_access_key_id=YOUR_ACCESS_KEY_ID \ -d s3_secret_access_key=YOUR_SECRET_ACCESS_KEY \ -d s3_region=us-east-1 \ -d s3_bucket=my-email-backups

To test the connection via the API:

curl -X POST https://api.forwardemail.net/v1/domains/sample.g0v.tw/test-s3-connection \ -u API_TOKEN:

Question 30

How do I convert SQLite backups to EML files?

Accepted Answer

If you download or store SQLite backups (either from our default storage or your own custom S3 bucket), you can convert them to standard .eml files using our standalone CLI tool convert-sqlite-to-eml. EML files can be opened with any email client (Thunderbird, Outlook, Apple Mail, etc.) or imported into other mail servers.

Installation

You can either download a pre-built binary (no Node.js required) or run it directly with Node.js:

Pre-built binaries — Download the latest release for your platform from GitHub Releases:

Platform Architecture File Linux x64 convert-sqlite-to-eml-linux-x64 Linux arm64 convert-sqlite-to-eml-linux-arm64 macOS Apple Silicon convert-sqlite-to-eml-darwin-arm64 Windows x64 convert-sqlite-to-eml-win-x64.exe

macOS users: After downloading, you may need to remove the quarantine attribute before running the binary:

sudo xattr -rd com.apple.quarantine ./convert-sqlite-to-eml-darwin-arm64

(Replace ./convert-sqlite-to-eml-darwin-arm64 with the actual path to the downloaded file.)

Linux users: After downloading, you may need to make the binary executable:

chmod +x ./convert-sqlite-to-eml-linux-x64

(Replace ./convert-sqlite-to-eml-linux-x64 with the actual path to the downloaded file.)

From source (requires Node.js >= 18):

cd tools/convert-sqlite-to-eml npm install node index.js

Usage

The tool supports both interactive and non-interactive modes.

Interactive mode — run without arguments and you will be prompted for all inputs:

./convert-sqlite-to-eml Forward Email - Convert SQLite Backup to EML ============================================= Path to SQLite backup file: /path/to/backup.sqlite IMAP/alias password: ******** Output ZIP path [/path/to/backup-2025-03-01T12-00-00-000Z.zip]:

Non-interactive mode — pass arguments via command-line flags for scripting and automation:

./convert-sqlite-to-eml \ --path /path/to/backup.sqlite \ --password "your-imap-password" \ --output /path/to/output.zip Flag Description --path Path to the encrypted SQLite backup file --password IMAP/alias password for decryption --output Output path for the ZIP file (default: auto-generated with ISO 8601 timestamp) --help Show help message

Output Format

The tool produces a password-protected ZIP archive (AES-256 encrypted) containing:

README.txt INBOX/ .eml .eml Sent/ .eml Drafts/ .eml

EML files are organized by mailbox folder. The ZIP password is the same as your IMAP/alias password. Each .eml file is a standard RFC 5322 email message with full headers, body text, and attachments reconstructed from the SQLite database.

How It Works

Question 31

Do you support self-hosting?

Accepted Answer

Yes, as of March 2025, we support a self-hosted option. Read the blog here. Checkout the self-hosted guide to get started. And for those interested in a more broken down step-by-step version see our Ubuntu or Debian based guides.

Question 32

How do I get started and set up email forwarding?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: Carefully read and follow steps one through eight listed below. Be sure to replace the email address of user@gmail.com with the email address you want to forward emails to (if it isn't already accurate). Similarly be sure to replace sample.g0v.tw with your custom domain name (if it isn't already accurate).

If you have already registered your domain name somewhere, then you must completely skip this step and go to step two! Otherwise you can click here to register your domain name.
Do you remember where you registered your domain? Once you remember this, then follow the instructions below:
Important: You must open a new tab and sign in to your domain registrar. You can easily click on your "Registrar" below to automatically do this. In this new tab, you must navigate to the DNS management page at your registrar – and we have provided the step by step navigation steps below under the "Steps to Configure" column. Once you've navigated to this page in the new tab, you can return to this tab and proceed to step three below. Do not close the opened tab yet; you will need it for future steps!
Registrar Steps to Configure 1&1 Log in Domain Center (Select your domain) Edit DNS Settings Amazon Route 53 Log in Hosted Zones (Select your domain) Aplus.net Log in My Servers Domain Management DNS Manager Bluehost FOR ROCK: Log in Domains (Click the ▼ icon next to manage) DNS
FOR LEGACY: Log in Domains Zone editor (Select your domain) Cloudflare Log in DNS DNS Made Easy Log in DNS (Select your domain) DNSimple Log in (Select your domain) DNS Manage Digital Ocean Log in Networking Domains (Select your domain) More Manage Domain Domain.com Log in In card view, click manage on your domain In list view, click the gear icon DNS & Nameservers DNS Records Domains.com
Watch Log in (Select your domain) Manage (click gear icon) Click on DNS & Nameservers in left-hand menu DreamHost Log in Panel Domains Manage Domains DNS Dyn Log in Overview Manage Simple Editor Records Gandi Log in (Select your domain) Management Edit the zone GoDaddy
Watch Log in Manage My Domains (Select your domain) Manage DNS Google Domains
Watch Log in (Select your domain) Configure DNS Namecheap
Watch Log in Domain List (Select your domain) Manage Advanced DNS Netlify Log in (Select your domain) Setup Netlify DNS Network Solutions Log in Account Manager My Domain Names (Select your domain) Manage Change Where Domain Points Advanced DNS Shopify
Watch Log in Managed Domains (Select your domain) DNS Settings Squarespace Log in Home menu Settings Domains (Select your domain) Advanced settings Custom Records Vercel's Now Using "now" CLI now dns add [domain] '@' MX [record-value] [priority] Weebly Log in Domains page (Select your domain) DNS Wix Log in Domains page (Click icon) Select Manage DNS Records eNom Log in Domains My Domains Other
Important: Don't see your registrar name listed here? Simply search on the Internet for "how to change DNS records on $REGISTRAR" (replacing $REGISTRAR with the name of your registrar – e.g. "how to change DNS records on GoDaddy" if you're using GoDaddy).
Using your registrar's DNS management page (the other tab you have opened), set the following "MX" records:
Important: Note that there should be NO other MX records set. Both records shown below MUST exist. Be sure there are no typos; and you have both mx1 and mx2 spelled correctly. If there were already MX records that existed, please delete them completely. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary.
Name/Host/Alias TTL Type Priority Answer/Value "@", ".", or blank 3600 MX 0 mx1.forwardemail.net "@", ".", or blank 3600 MX 0 mx2.forwardemail.net
Using your registrar's DNS management page (the other tab you have opened), set the following TXT record(s):
Important: If you are on a paid plan, then you must completely skip this step and go to step five! If you are not on a paid plan, then your forwarded addresses will be publicly searchable – go to My Account Domains and upgrade your domain to a paid plan if desired. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to choose one or more combinations from Option A to Option F listed below.

Option A: If you are forwarding all emails from your domain, (e.g. "all@sample.g0v.tw", "hello@sample.g0v.tw", etc) to a specific address "user@gmail.com":
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=user@gmail.com
Tip: Make sure to replace the values above in the "Value" column with your own email address. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary. A lower time to live ("TTL") value will ensure any future changes made to your DNS records are propagated throughout the Internet quicker – think of this as how long it will be cached in-memory (in seconds). You can learn more about TTL on Wikipedia.

Option B: If you just need to forward a single email address (e.g. hello@sample.g0v.tw to user@gmail.com; this will also forward "hello+test@sample.g0v.tw" to "user+test@gmail.com" automatically):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com
Option C: If you are forwarding multiple emails, then you'll want to separate them with a comma:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com
Option D: You can have an infinite amount of forwarding emails setup – just make sure to not wrap over 255 characters in a single-line and start each line with "forward-email=". An example is provided below:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com "@", ".", or blank 3600 TXT forward-email=help:user@gmail.com,foo:user@gmail.com "@", ".", or blank 3600 TXT forward-email=orders:user@gmail.com,baz:user@gmail.com "@", ".", or blank 3600 TXT forward-email=info:user@gmail.com,beep:user@gmail.com "@", ".", or blank 3600 TXT forward-email=errors:user@gmail.com,boop:user@gmail.com
Option E: You can also specify a domain name in your TXT record to have global alias forwarding (e.g. "user@sample.g0v.tw" will get forwarded to "user@example.net"):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=example.net
Option F: You can even use webhooks as a global or individual alias to forward emails to. See the example and full section on webhooks titled Do you support webhooks below.
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn
Option G: You can even use regular expressions ("regex") for matching aliases and for handling substitutions to forward emails to. See the examples and full section on regex titled Do you support regular expressions or regex below.

Need advanced regex with substitution? See the examples and full section on regex titled Do you support regular expressions or regex below.

Simple Example: If I want all emails that go to `linus@sample.g0v.tw` or `torvalds@sample.g0v.tw` to forward to `user@gmail.com`:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com
Important: Catch-all forwarding rules could also be described as "fall-through". This means that incoming emails which match at least one specific forwarding rule will be used instead of the catch-all. Specific rules include email addresses and regular expressions.

For example:
forward-email=hello:first@gmail.com,second@gmail.com
Emails sent to hello@sample.g0v.tw will **not** be forwarded to second@gmail.com (catch-all) with this configuration, and instead only be delivered to first@gmail.com.
Using your registrar's DNS management page (the other tab you have opened), additionally set the following TXT record: Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all
Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).
Verify your DNS records using our "Verify Records" tool available at My Account Domains Setup.
Send a test email to confirm it works. Note that it might take some time for your DNS records to propagate.
Tip: If you are not receiving test emails, or receive a test email that says "Be careful with this message", then see the answers for Why am I not receiving my test emails and Why are my test emails sent to myself in Gmail showing as "suspicious" respectively.
If you wish to "Send Mail As" from Gmail, then you will need to watch this video, or follow the steps under How to Send Mail As Using Gmail below.

Congratulations! You've successfully completed all steps.

Tip: Optional add-ons are listed below. Note that these add-ons are completely optional and may not be necessary. We wanted to at least provide you with additional information if necessary.

Optional Add-on: If you're using the How to Send Mail As using Gmail feature, then you may want to add yourself to an allowlist. See these instructions by Gmail on this topic.

Question 33

Can I use multiple MX exchanges and servers for advanced forwarding?

Accepted Answer

Yes, but you should only have one MX exchange listed in your DNS records.

Do not attempt to use "Priority" as a way to configure multiple MX exchanges.

Instead, you need to configure your existing MX exchange to forward mail for all non-matching aliases to our service's exchanges (mx1.forwardemail.net and/or mx2.forwardemail.net).

If you are using Google Workspace and you want to forward all non-matching aliases to our service, then see https://support.google.com/a/answer/6297084.

If you are using Microsoft 365 (Outlook) and you want to forward all non-matching aliases to our service, then see https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-to-route-mail and https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mail-flow-for-multiple-locations.

Question 34

How do I set up a vacation responder (out of office auto-responder)?

Accepted Answer

Go to My Account Domains Aliases and either create or edit the alias you would like to configure a vacation autoresponder for.

You have the ability to configure a start date, end date, subject, and message, and enable or disable it at anytime:

Plaintext subject and message are currently supported (we use striptags package internally to remove any HTML).
Subject is limited to 100 characters.
Message is limited to 1000 characters.
Setup requires Outbound SMTP configuration (e.g. you will need to setup DKIM, DMARC, and Return-Path DNS records).
- Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.
Vacation responder cannot be enabled on global vanity domain names (e.g. disposable addresses are not supported).
Vacation responder cannot be enabled for aliases with wildcard/catch-all (*) nor regular expressions.

Unlike mail systems such as postfix (e.g. that use the sieve vacation filter extension) – Forward Email automatically adds your DKIM signature, dummy-proofs connection issues when sending vacation responses (e.g. due to common SSL/TLS connection issues and legacy maintained servers), and even supports Open WKD and PGP encryption for vacation responses.

We only send once per allowlisted sender every 4 days (which is similar to Gmail's behavior).
- Our Redis cache uses a fingerprint of alias_id and sender, whereas alias_id is the alias MongoDB ID and sender is either the From address (if allowlisted) or root domain in the From address (if not allowlisted). For simplicity the expiry of this fingerprint in cache is set to 4 days.
- Our approach of using the root domain parsed in the From address for non-allowlisted senders prevents abuse from relatively unknown senders (e.g. malicious actors) from flooding vacation responder messages.
We only send when the MAIL FROM and/or From is not blank and does not contain (case-insensitive) a postmaster username (the portion before the @ in an email).
We don't send if the original message had any of the following headers (case-insensitive):
- Header of auto-submitted with a value not equal to no.
- Header of x-auto-response-suppress with a value of dr, autoreply, auto-reply, auto_reply, or all
- Header of list-id, list-subscribe, list-unsubscribe, list-help, list-post, list-owner, list-archive, x-autoreply, x-autorespond, or x-auto-respond (regardless of value).
- Header of precedence with a value of bulk, autoreply, auto-reply, auto_reply, or list.
We don't send if the MAIL FROM or From email address ends with +donotreply, -donotreply, +noreply, or -noreply.
We don't send if the From email address username portion was mdaemon and it had a case-insensitive header of X-MDDSN-Message.
We don't send if there was a case-insensitive content-type header of multipart/report.

Question 35

How do I set up SPF for Forward Email?

Accepted Answer

Using your registrar's DNS management page, set the following TXT record:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all

Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Important: If you are using Microsoft Outlook or Live.com, you'll need to append include:spf.protection.outlook.com to your SPF TXT record, for example:

v=spf1 a include:spf.forwardemail.net include:spf.protection.outlook.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).

Question 36

How do I set up DKIM for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 37

How do I set up DMARC for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 38

How do I view DMARC Reports?

Accepted Answer

Forward Email provides a comprehensive DMARC Reports dashboard that allows you to monitor your email authentication performance across all your domains from a single interface.

What are DMARC Reports?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) reports are XML files sent by receiving mail servers that tell you how your emails are being authenticated. These reports help you understand:

How many emails are being sent from your domain
Whether those emails are passing SPF and DKIM authentication
What actions receiving servers are taking (accept, quarantine, or reject)
Which IP addresses are sending email on behalf of your domain

How to Access DMARC Reports

Go to My Account DMARC Reports to view your dashboard. You can also access domain-specific reports from My Account Domains by clicking the "DMARC" button next to any domain.

Dashboard Features

The DMARC Reports dashboard provides:

Summary Metrics: Total reports received, total messages analyzed, SPF alignment rate, DKIM alignment rate, and overall pass rate
Messages Over Time Chart: Visual trend of email volume and authentication rates over the past 30 days
Alignment Summary: Donut chart showing SPF vs DKIM alignment distribution
Message Disposition: Stacked bar chart showing how receiving servers handled your emails (accepted, quarantined, or rejected)
Recent Reports Table: Detailed list of individual DMARC reports with filtering and pagination
Domain Filtering: Filter reports by specific domain when managing multiple domains

Why This Matters

For organizations managing multiple domains (like enterprises, non-profits, or agencies), DMARC reports are essential for:

Identifying unauthorized senders: Detect if someone is spoofing your domain
Improving deliverability: Ensure your legitimate emails pass authentication
Monitoring email infrastructure: Track which services and IPs are sending on your behalf
Compliance: Maintain visibility into email authentication for security audits

Unlike other services that require separate DMARC monitoring tools, Forward Email includes DMARC report processing and visualization as part of your account at no additional cost.

Requirements

DMARC Reports are available for paid plans only
Your domain must have DMARC configured (see How do I set up DMARC for Forward Email)
Reports are automatically collected when receiving mail servers send them to your configured DMARC reporting address

Weekly Email Reports

Paid plan users automatically receive weekly DMARC report summaries via email. These emails include:

Summary statistics for all your domains
SPF and DKIM alignment rates
Message disposition breakdown (accepted, quarantined, rejected)
Top reporting organizations (Google, Microsoft, Yahoo, etc.)
IP addresses with alignment issues that may need attention
Direct links to your DMARC Reports dashboard

Weekly reports are sent automatically and cannot be disabled separately from other email notifications.

Question 39

How do I connect and configure my contacts?

Accepted Answer

To configure your contacts, use the CardDAV URL of: https://carddav.forwardemail.net (or simply carddav.forwardemail.net if your client allows it)

Question 40

How do I connect and configure my calendars?

Accepted Answer

To configure your calendar, use the CalDAV URL of: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Question 41

How do I add more calendars and manage existing calendars?

Accepted Answer

If you'd like to add additional calendars, then just add a new calendar URL of: https://caldav.forwardemail.net/dav/principals/calendar-name (be sure to replace calendar-name with your desired calendar name)

You can change a calendar's name and color after creation – just use your preferred calendar application (e.g. Apple Mail or Thunderbird).

Question 42

How do I connect and configure tasks and reminders?

Accepted Answer

To configure tasks and reminders, use the same CalDAV URL as calendars: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Tasks and reminders will automatically be separated from calendar events into their own "Reminders" or "Tasks" calendar collection.

Setup instructions by platform:

macOS/iOS:

Add a new CalDAV account in System Preferences > Internet Accounts (or Settings > Accounts on iOS)
Use caldav.forwardemail.net as the server
Enter your Forward Email alias and generated password
After setup, you'll see both "Calendar" and "Reminders" collections
Use the Reminders app to create and manage tasks

Android with Tasks.org:

Install Tasks.org from Google Play Store or F-Droid
Go to Settings > Synchronization > Add Account > CalDAV
Enter server: https://caldav.forwardemail.net
Enter your Forward Email alias and generated password
Tasks.org will automatically discover your task calendars

Thunderbird:

Install the Lightning add-on if not already installed
Create a new calendar with type "CalDAV"
Use URL: https://caldav.forwardemail.net
Enter your Forward Email credentials
Both events and tasks will be available in the calendar interface

Question 43

Why can't I create tasks in macOS Reminders?

Accepted Answer

If you're having trouble creating tasks in macOS Reminders, try these troubleshooting steps:

Check account setup: Ensure your CalDAV account is properly configured with caldav.forwardemail.net
Verify separate calendars: You should see both "Calendar" and "Reminders" in your account. If you only see "Calendar", the task support may not be fully activated yet.
Refresh account: Try removing and re-adding your CalDAV account in System Preferences > Internet Accounts
Check server connectivity: Test that you can access https://caldav.forwardemail.net in your browser
Verify credentials: Ensure you're using the correct alias email and generated password (not your account password)
Force sync: In Reminders app, try creating a task and then manually refreshing the sync

Common issues:

"Reminders calendar not found": The server may need a moment to create the Reminders collection on first access
Tasks not syncing: Check that both devices are using the same CalDAV account credentials
Mixed content: Ensure tasks are being created in the "Reminders" calendar, not the general "Calendar"

Question 44

How do I set up Tasks.org on Android?

Accepted Answer

Tasks.org is a popular open-source task manager that works excellently with Forward Email's CalDAV task support.

Installation and Setup:

Install Tasks.org:
- From Google Play Store: Tasks.org
- From F-Droid: Tasks.org on F-Droid
Configure CalDAV sync:
- Open Tasks.org
- Go to ☰ Menu > Settings > Synchronization
- Tap "Add Account"
- Select "CalDAV"
Enter Forward Email settings:
- Server URL: https://caldav.forwardemail.net
- Username: Your Forward Email alias (e.g., you@yourdomain.com)
- Password: Your alias-specific generated password
- Tap "Add Account"
Account discovery:
- Tasks.org will automatically discover your task calendars
- You should see your "Reminders" collection appear
- Tap "Subscribe" to enable sync for the task calendar
Test sync:
- Create a test task in Tasks.org
- Check that it appears in other CalDAV clients (like macOS Reminders)
- Verify changes sync both ways

Features available:

✅ Task creation and editing
✅ Due dates and reminders
✅ Task completion and status
✅ Priority levels
✅ Subtasks and task hierarchy
✅ Tags and categories
✅ Two-way sync with other CalDAV clients

Troubleshooting:

If no task calendars appear, try manually refreshing in Tasks.org settings
Ensure you have at least one task created on the server (you can create one in macOS Reminders first)
Check network connectivity to caldav.forwardemail.net

Question 45

How do I set up SRS for Forward Email?

Accepted Answer

We automatically configure Sender Rewriting Scheme ("SRS") – you do not need to do this yourself.

Question 46

How do I set up MTA-STS for Forward Email?

Accepted Answer

Please refer to our section on MTA-STS for more insight.

Question 47

How do I add a profile picture to my email address?

Accepted Answer

If you're using Gmail, then follow these steps below:

Go to https://google.com and sign out of all email accounts
Click "Sign In" and on the drop-down click on "other account"
Select "Use another account"
Select "Create account"
Select "Use my current email address instead"
Enter your custom domain name email address
Retrieve the verification email sent to your email address
Enter the verification code from this email
Complete profile information for your new Google account
Agree to all Privacy and Terms of Use policies
Go to https://google.com and in the top right corner, click on your profile icon, and click on the "change" button
Upload a new photo or avatar for your account
Changes will take approximately 1-2 hours to propagate, but sometimes may be very quick.
Send a test email and the profile photo should appear.

Question 48

Do you support newsletters or mailing lists for marketing related email?

Accepted Answer

Yes, you can read more at https://forwardemail.net/guides/newsletter-with-listmonk.

Please note that in order to maintain IP reputation and ensure deliverability, Forward Email has a manual review process on a per-domain basis for newsletter approval. Email support@forwardemail.net or open a help request for approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Question 49

Do you support sending email with API?

Accepted Answer

Yes, as of May 2023 we support sending email with API as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Please view our section on Emails in our API documentation for options, examples, and more insight.

In order to send outbound email with our API, you must use your API token available under My Security.

Question 50

Do you support receiving email with IMAP?

Accepted Answer

Yes, as of October 16, 2023 we support receiving email over IMAP as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@sample.g0v.tw)

Tip: We recommend using Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for IMAP server name, enter imap.forwardemail.net
When prompted for IMAP server port, enter 993 (SSL/TLS) – see alternate IMAP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for IMAP server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 51

Do you support POP3?

Accepted Answer

Yes, as of December 4, 2023 we support POP3 as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@sample.g0v.tw)

Tip: We recommend using Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for POP3 server name, enter pop3.forwardemail.net
When prompted for POP3 server port, enter 995 (SSL/TLS) – see alternate POP3 ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for POP3 server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 52

Do you support calendars (CalDAV)?

Accepted Answer

Yes, as of February 5, 2024 we have added this feature. Our server is caldav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@sample.g0v.tw Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use calendar support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 53

Do you support tasks and reminders (CalDAV VTODO)?

Accepted Answer

Yes, as of October 14, 2025 we have added CalDAV VTODO support for tasks and reminders. This uses the same server as our calendar support: caldav.forwardemail.net.

Our CalDAV server supports both calendar events (VEVENT) and tasks (VTODO) components using unified calendars. This means each calendar can contain both events and tasks, providing maximum flexibility and compatibility across all CalDAV clients.

How calendars and lists work:

Each calendar supports both events and tasks - You can add events, tasks, or both to any calendar
Apple Reminders lists - Each list you create in Apple Reminders becomes a separate calendar on the server
Multiple calendars - You can create as many calendars as you need, each with its own name, color, and organization
Cross-client sync - Tasks and events sync seamlessly between all compatible clients

Supported task clients:

Task features supported:

Task creation, editing, and deletion
Due dates and start dates
Task completion status (NEEDS-ACTION, IN-PROCESS, COMPLETED, CANCELLED)
Task priority levels
Recurring tasks
Task descriptions and notes
Multi-device synchronization
Subtasks with RELATED-TO property
Task reminders with VALARM

The login credentials are the same as for calendar support:

Login Example Description Username user@sample.g0v.tw Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

Important notes:

Each Reminders list is a separate calendar - When you create a new list in Apple Reminders, it creates a new calendar on the CalDAV server
Thunderbird users - You'll need to manually subscribe to each calendar/list you want to sync, or use the calendar home URL: https://caldav.forwardemail.net/dav/your-email@domain.com/
Apple users - Calendar discovery happens automatically, so all your calendars and lists will appear in Calendar.app and Reminders.app
Unified calendars - All calendars support both events and tasks, giving you flexibility in how you organize your data

Question 54

Do you support contacts (CardDAV)?

Accepted Answer

Yes, as of June 12, 2025 we have added this feature. Our server is carddav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@sample.g0v.tw Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use contacts support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 55

Do you support sending email with SMTP?

Accepted Answer

Yes, as of May 2023 we support sending email with SMTP as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are using Gmail, then refer to our Send Mail As with Gmail guide. If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@sample.g0v.tw)

Tip: We recommend using Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for SMTP server name, enter smtp.forwardemail.net
When prompted for SMTP server port, enter 465 (SSL/TLS) – see alternate SMTP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for SMTP server password, paste the password from Generate Password in step 3 above
Save your settings and send your first test email – if you are having issues, then please contact us

Important: Please note that in order to maintain IP reputation and ensure deliverability, we have a manual review process on a per-domain basis for outbound SMTP approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Congratulations! You've successfully completed all steps.

Question 56

Do you support OpenPGP/MIME, end-to-end encryption ("E2EE"), and Web Key Directory ("WKD")?

Accepted Answer

Yes, we support OpenPGP, end-to-end encryption ("E2EE"), and the discovery of public keys using Web Key Directory ("WKD"). You can configure OpenPGP using keys.openpgp.org or self-host your own keys (refer to this gist for WKD server setup).

WKD lookups are cached for 1 hour to ensure timely email delivery → therefore if you add, change, or remove your WKD key, then please email us at support@forwardemail.net with your email address in order for us to manually purge the cache.
We support PGP encryption for messages that are forwarded via WKD lookup or using an uploaded PGP key on our interface.
Uploaded keys take prevalance as long as the PGP checkbox is enabled/checked.
Messages sent to webhooks are not currently encrypted with PGP.
If you have multiple aliases that match for a given forwarding address (e.g. regex/wildcard/exact combo) and if more than one of these contains an uploaded PGP key and has PGP checked → then we will send you an error alert email and will not encrypt the message with your uploaded PGP key. This is very rare and usually only applies to advanced users with complex alias rules.
PGP encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require PGP encryption on all mail then we suggest to use our IMAP service and configure your PGP key for your alias for inbound mail.

You can validate your Web Key Directory setup at https://wkd.chimbosonic.com/ (open-source) or https://www.webkeydirectory.com/ (proprietary).

Automatic Encryption: If you are using our outbound SMTP service and sending unencrypted messages, then we will automatically attempt to encrypt messages on a per-recipient basis using Web Key Directory ("WKD").

Important: You must follow all of the following steps in order to enable OpenPGP for your custom domain name.

Download and install your email client's recommended plugin below:
Email Client Platform Recommended Plugin Notes Thunderbird Desktop Configure OpenPGP in Thunderbird Thunderbird has built-in support for OpenPGP. Gmail Browser Mailvelope or FlowCrypt (proprietary license) Gmail does not support OpenPGP, however you can download the open-source plugin Mailvelope or FlowCrypt. Apple Mail macOS Free-GPGMail Apple Mail does not support OpenPGP, however you can download the open-source plugin Free-GPGMail. Apple Mail iOS PGPro or FlowCrypt (proprietary license) Apple Mail does not support OpenPGP, however you can download the open-source plugin PGPro or FlowCrypt. Outlook Windows gpg4win Outlook's desktop mail client does not support OpenPGP, however you can download the open-source plugin gpg4win. Outlook Browser Mailvelope or FlowCrypt (proprietary license) Outlook's web-based mail client does not support OpenPGP, however you can download the open-source plugin Mailvelope or FlowCrypt. Android Mobile OpenKeychain or FlowCrypt Android mail clients such as Thunderbird Mobile and FairEmail both support the open-source plugin OpenKeychain. You could alternatively use the open-source (proprietary licensing) plugin FlowCrypt. Google Chrome Browser Mailvelope or FlowCrypt (proprietary license) You can download the open-source browser extension Mailvelope or FlowCrypt. Mozilla Firefox Browser Mailvelope or FlowCrypt (proprietary license) You can download the open-source browser extension Mailvelope or FlowCrypt. Microsoft Edge Browser Mailvelope You can download the open-source browser extension Mailvelope. Brave Browser Mailvelope or FlowCrypt (proprietary license) You can download the open-source browser extension Mailvelope or FlowCrypt. Balsa Desktop Configure OpenPGP in Balsa Balsa has built-in support for OpenPGP. KMail Desktop Configure OpenPGP in KMail KMail has built-in support for OpenPGP. GNOME Evolution Desktop Configure OpenPGP in Evolution GNOME Evolution has built-in support for OpenPGP. Terminal Desktop Configure gpg in Terminal You can use the open-source gpg command line tool to generate a new key from command line.
Open the plugin, create your public key, and configure your email client to use it.
Upload your public key at https://keys.openpgp.org/upload.

Tip: You can visit https://keys.openpgp.org/manage to manage your key in the future.

Optional Add-on: If you are using our encrypted storage (IMAP/POP3) service and want all email stored in your (already encrypted) SQLite database to be encrypted with your public key, then go to My Account Domains Aliases (e.g. hello@sample.g0v.tw) Edit OpenPGP and upload your public key.
Add a new CNAME record to your domain name (e.g. sample.g0v.tw):
Name/Host/Alias TTL Type Answer/Value openpgpkey 3600 CNAME wkd.keys.openpgp.org
Tip: If your alias is using our vanity/disposable domains (e.g. hideaddress.net), then you can skip this step.

Congratulations! You've successfully completed all steps.

Question 57

Do you support S/MIME encryption?

Accepted Answer

Yes, we support S/MIME (Secure/Multipurpose Internet Mail Extensions) encryption as defined in RFC 8551. S/MIME provides end-to-end encryption using X.509 certificates, which is widely supported by enterprise email clients.

We support both RSA and ECC (Elliptic Curve Cryptography) certificates:

RSA certificates: 2048-bit minimum, 4096-bit recommended
ECC certificates: P-256, P-384, and P-521 NIST curves

To configure S/MIME encryption for your alias:

Obtain an S/MIME certificate from a trusted Certificate Authority (CA) or generate a self-signed certificate for testing.

Tip: Free S/MIME certificates are available from providers like Actalis or Actalis Free S/MIME.
Export your certificate in PEM format (the public certificate only, not the private key).
Go to My Account Domains Aliases (e.g. hello@sample.g0v.tw) Edit S/MIME and upload your public certificate.
Once configured, all incoming emails to your alias will be encrypted using your S/MIME certificate before being stored or forwarded.

Note: S/MIME encryption is applied to incoming messages that are not already encrypted. If a message is already encrypted with OpenPGP or S/MIME, it will not be re-encrypted.

Important: S/MIME encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require S/MIME encryption on all mail then we suggest to use our IMAP service and configure your S/MIME certificate for your alias for inbound mail.

The following email clients have built-in S/MIME support:

Email Client Platform Notes Apple Mail macOS Built-in S/MIME support. Go to Mail > Preferences > Accounts > your account > Trust to configure certificates. Apple Mail iOS Built-in S/MIME support. Go to Settings > Mail > Accounts > your account > Advanced > S/MIME to configure. Microsoft Outlook Windows Built-in S/MIME support. Go to File > Options > Trust Center > Trust Center Settings > Email Security to configure. Microsoft Outlook macOS Built-in S/MIME support. Go to Tools > Accounts > Advanced > Security to configure. Thunderbird Desktop Built-in S/MIME support. Go to Account Settings > End-To-End Encryption > S/MIME to configure. GNOME Evolution Desktop Built-in S/MIME support. Go to Edit > Preferences > Mail Accounts > your account > Security to configure. KMail Desktop Built-in S/MIME support. Go to Settings > Configure KMail > Identities > your identity > Cryptography to configure.

Congratulations! You've successfully configured S/MIME encryption for your alias.

Question 58

Do you support Sieve email filtering?

Accepted Answer

Yes! We support Sieve email filtering as defined in RFC 5228. Sieve is a powerful, standardized scripting language for server-side email filtering that allows you to automatically organize, filter, and respond to incoming messages.

Supported Sieve Extensions

We support a comprehensive set of Sieve extensions:

Extension RFC Description fileinto RFC 5228 File messages into specific folders reject / ereject RFC 5429 Reject messages with an error vacation RFC 5230 Automatic vacation/out-of-office replies vacation-seconds RFC 6131 Fine-grained vacation response intervals imap4flags RFC 5232 Set IMAP flags (\Seen, \Flagged, etc.) envelope RFC 5228 Test envelope sender/recipient body RFC 5173 Test message body content variables RFC 5229 Store and use variables in scripts relational RFC 5231 Relational comparisons (greater than, less than) comparator-i;ascii-numeric RFC 4790 Numeric comparisons copy RFC 3894 Copy messages while redirecting editheader RFC 5293 Add or delete message headers date RFC 5260 Test date/time values index RFC 5260 Access specific header occurrences regex draft-ietf-sieve-regex Regular expression matching enotify RFC 5435 Send notifications (e.g., mailto:) environment RFC 5183 Access environment information mailbox RFC 5490 Test mailbox existence, create mailboxes special-use RFC 8579 File into special-use mailboxes (\Junk, \Trash) duplicate RFC 7352 Detect duplicate messages ihave RFC 5463 Test for extension availability subaddress RFC 5233 Access user+detail address parts

Extensions Not Supported

The following extensions are not currently supported:

Extension Reason include Security risk (script injection) and requires global script storage mboxmetadata / servermetadata Requires IMAP METADATA extension support foreverypart / mime / extracttext / replace / enclose Complex MIME tree manipulation not yet implemented

Example Sieve Scripts

File newsletters into a folder:

require ["fileinto"]; if header :contains "List-Id" "newsletter" { fileinto "Newsletters"; }

Auto-reply when on vacation:

require ["vacation"]; vacation :days 7 :subject "Out of Office" "I am currently out of the office and will respond when I return.";

Mark messages from important senders:

require ["imap4flags"]; if address :is "from" "boss@sample.g0v.tw" { setflag "\Flagged"; }

Reject spam with specific subjects:

require ["reject"]; if header :contains "subject" ["lottery", "winner", "urgent transfer"] { reject "Message rejected due to spam content."; }

Managing Sieve Scripts

You can manage your Sieve scripts in several ways:

Note: Sieve filtering is applied to incoming messages before they are stored in your mailbox. Scripts are executed in order of priority, and the first matching action determines how the message is handled.

Security: For security, redirect actions are limited to 10 per script and 100 per day. Vacation responses are rate-limited to prevent abuse.

Question 59

Do you support MTA-STS?

Accepted Answer

Yes, as of March 2, 2023 we support MTA-STS. You can use this template if you wish to enable it on your domain.

Our configuration can be found publicly on GitHub at https://github.com/forwardemail/mta-sts.forwardemail.net.

Question 60

Do you support passkeys and WebAuthn?

Accepted Answer

Yes! As of December 13, 2023 we have added support for passkeys due to high demand.

Passkeys allow you to securely log in without requiring a password and two-factor authentication.

You can validate your identity with touch, facial recognition, device-based password, or PIN.

We allow you to manage up to 30 passkeys at once, so that you can log in with all of your devices with ease.

Learn more about passkeys at the following links:

Sign-in to your applications and websites with passkeys (Google)
Use passkeys to sign in to apps and websites on iPhone (Apple)
Wikipedia article on Passkeys

Question 61

Do you support email best practices?

Accepted Answer

Yes. We have built-in support for SPF, DKIM, DMARC, ARC, and SRS across all plans. We have also worked extensively with the original authors of these specifications and other email experts to ensure perfection and high deliverability.

Question 62

Do you support bounce webhooks?

Accepted Answer

Tip: Looking for documentation on email webhooks? See Do you support webhooks? for more insight.

Yes, as of August 14, 2024 we have added this feature. You can now go to My Account → Domains → Settings → Bounce Webhook URL and configure an http:// or https:// URL that we will send a POST request to whenever outbound SMTP emails bounce.

This is useful for you to manage and monitor your outbound SMTP – and can be used to maintain subscribers, opt-out, and detect whenever bounces occur.

Bounce webhook payloads are sent as a JSON with these properties:

email_id (String) - email ID that corresponds to an email in My Account → Emails (outbound SMTP)
list_id (String) - the List-ID header (case-insensitive) value, if any, from the original outbound email
list_unsubscribe (String) - the List-Unsubscribe header (case-insensitive) value, if any, from the original outbound email
feedback_id (String) - the Feedback-ID header (case-insensitive) value, if any, from the original outbound email
recipient (String) - the email address of the recipient that bounced or errored
message (String) - a detailed error message for the bounce
response (String) - the SMTP response message
response_code (Number) - the parsed SMTP response code
truth_source (String) - if the response code was from a trusted source, this value will be populated with the root domain name (e.g. google.com or yahoo.com)
bounce (Object) - an object containing the following properties that detail the bounce and rejection status
- action (String) - bounce action (e.g. "reject")
- message (String) - bounce reason (e.g. "Message Sender Blocked By Receiving Server")
- category (String) - bounce category (e.g. "block")
- code (Number) - bounce status code (e.g. 554)
- status (String) - bounce code from response message (e.g. 5.7.1)
- line (Number) - parsed line number, if any, from Zone-MTA bounce parse list (e.g. 526)
headers (Object) - key value pair of headers for the outbound email
bounced_at (String) - ISO 8601 formatted Date for when the bounce error occurred

For example:

{ "email_id": "66bcce793ef7b2a0928e14ba", "recipient": "example@gmail.com", "message": "The email account that you tried to reach is over quota.", "response": "552 5.2.2 The email account that you tried to reach is over quota.", "response_code": 552, "truth_source": "google.com", "bounce": { "action": "reject", "message": "Gmail Mailbox is full", "category": "capacity", "code": 552, "status": "5.2.2", "line": 300 }, "headers": {}, "bounced_at": "2024-08-24T01:50:02.828Z" }

Here are a few additional notes regarding bounce webhooks:

Question 63

Do you support webhooks?

Accepted Answer

Tip: Looking for documentation on bounce webhooks? See Do you support bounce webhooks? for more insight.

Yes, as of May 15, 2020 we have added this feature. You can simply add webhook(s) exactly like you would with any recipient! Please ensure that you have the "http" or "https" protocol prefixed in the webhook's URL.

Enhanced Privacy Protection: If you are on a paid plan (which features enhanced privacy protection), then please go to My Account Domains and click on "Aliases" next to your domain to configure your webhooks. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to follow the instructions below.

If you are on the free plan, then simply add a new DNS TXT record as shown below:

For example, if I want all emails that go to alias@sample.g0v.tw to forward to a new request bin test endpoint:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn

Or perhaps you want all emails that go to sample.g0v.tw to forward to this endpoint:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=https://requestbin.com/r/en8pfhdgcculn

Here are additional notes regarding webhooks:

Tip: Curious what the webhook request looks like from forwarded emails? We've included an example below for you!

{ "attachments": [ { "type": "attachment", "content": { "type": "Buffer", "data": [ 104, 101, 108, 108, 111, 32, 119, 111, 114, 108, 100, 33 ] }, "contentType": "text/plain", "partId": "2", "release": null, "contentDisposition": "attachment", "filename": "text1.txt", "headers": {}, "checksum": "fc3ff98e8c6a0d3087d515c0473f8677", "size": 12 } ], "headers": "ARC-Seal: i=1; a=rsa-sha256; t=1653506802; cv=none; d=forwardemail.net; s=default; b=R6QJ0tGwwjg2VPxiAlVIKxsg3jEPtRGKPTIOdZNWuhWrbssttFdOYzRRqvacDyN5SLoyDhVye DUA/64IxANXdHVFlpR258Yp7WxLDv2gtJD5vNSKYmUJZOWk1TynmlqTYrp0Vuqg2xIUjIlPBWAJ PPNx4JvOLjJuWYynU2qIWz0= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=forwardemail.net; h=MIME-Version: Date: Message-ID: From: Content-Type; q=dns/txt; s=default; t=1653506802; bh=cEYDoyTy+Ub29XZt/zXR+sprfUE6BW0y5cHfah01PT4=; b=F/t56AAXr2Kv3G6VsbdT5OKDVJf2ulhwLiTM18Ra4tDPUKPSGSLKrWvxiXEg5NMWwdWnsOYrL r3YSm4uMxVMhHZbHm/sUu4QZq5/18hQsAkCv6fI9ifTjDwBrN5zpLOhPoZFFo+TyvHxiII3Xv3L UEzmUIIaJRX6tboQ160tino= ARC-Authentication-Results: i=1; mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1; Authentication-Results: mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) ", "headerLines": [ { "key": "arc-seal", "line": "ARC-Seal: i=1; a=rsa-sha256; t=1653506802; cv=none; d=forwardemail.net; s=default; b=R6QJ0tGwwjg2VPxiAlVIKxsg3jEPtRGKPTIOdZNWuhWrbssttFdOYzRRqvacDyN5SLoyDhVye DUA/64IxANXdHVFlpR258Yp7WxLDv2gtJD5vNSKYmUJZOWk1TynmlqTYrp0Vuqg2xIUjIlPBWAJ PPNx4JvOLjJuWYynU2qIWz0=" }, { "key": "arc-message-signature", "line": "ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=forwardemail.net; h=MIME-Version: Date: Message-ID: From: Content-Type; q=dns/txt; s=default; t=1653506802; bh=cEYDoyTy+Ub29XZt/zXR+sprfUE6BW0y5cHfah01PT4=; b=F/t56AAXr2Kv3G6VsbdT5OKDVJf2ulhwLiTM18Ra4tDPUKPSGSLKrWvxiXEg5NMWwdWnsOYrL r3YSm4uMxVMhHZbHm/sUu4QZq5/18hQsAkCv6fI9ifTjDwBrN5zpLOhPoZFFo+TyvHxiII3Xv3L UEzmUIIaJRX6tboQ160tino=" }, { "key": "arc-authentication-results", "line": "ARC-Authentication-Results: i=1; mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled)" }, { "key": "received-spf", "line": "Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1;" }, { "key": "authentication-results", "line": "Authentication-Results: mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled)" }, { "key": "x-forward-email-sender", "line": "X-Forward-Email-Sender: rfc822; test@example.net" }, { "key": "x-forward-email-session-id", "line": "X-Forward-Email-Session-ID: w2czxgznghn5ryyw" }, { "key": "x-forward-email-version", "line": "X-Forward-Email-Version: 9.0.0" }, { "key": "content-type", "line": "Content-Type: multipart/mixed; boundary="--_NmP-179a735428ca7575-Part_1"" }, { "key": "from", "line": "From: some " }, { "key": "message-id", "line": "Message-ID: <69ad5fc2-91cb-728f-ae5c-eeedc5f267b6@example.net>" }, { "key": "date", "line": "Date: Wed, 25 May 2022 19:26:41 +0000" }, { "key": "mime-version", "line": "MIME-Version: 1.0" } ], "html": "some random text", "text": "some random text", "textAsHtml": "

some random text

", "date": "2022-05-25T19:26:41.000Z", "from": { "value": [ { "address": "random@sample.g0v.tw", "name": "some" } ], "html": "some <random@sample.g0v.tw>", "text": "some " }, "messageId": "<69ad5fc2-91cb-728f-ae5c-eeedc5f267b6@example.net>", "raw": "ARC-Seal: i=1; a=rsa-sha256; t=1653506802; cv=none; d=forwardemail.net; s=default; b=R6QJ0tGwwjg2VPxiAlVIKxsg3jEPtRGKPTIOdZNWuhWrbssttFdOYzRRqvacDyN5SLoyDhVye DUA/64IxANXdHVFlpR258Yp7WxLDv2gtJD5vNSKYmUJZOWk1TynmlqTYrp0Vuqg2xIUjIlPBWAJ PPNx4JvOLjJuWYynU2qIWz0= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=forwardemail.net; h=MIME-Version: Date: Message-ID: From: Content-Type; q=dns/txt; s=default; t=1653506802; bh=cEYDoyTy+Ub29XZt/zXR+sprfUE6BW0y5cHfah01PT4=; b=F/t56AAXr2Kv3G6VsbdT5OKDVJf2ulhwLiTM18Ra4tDPUKPSGSLKrWvxiXEg5NMWwdWnsOYrL r3YSm4uMxVMhHZbHm/sUu4QZq5/18hQsAkCv6fI9ifTjDwBrN5zpLOhPoZFFo+TyvHxiII3Xv3L UEzmUIIaJRX6tboQ160tino= ARC-Authentication-Results: i=1; mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1; Authentication-Results: mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) X-Forward-Email-Sender: rfc822; test@example.net X-Forward-Email-Session-ID: w2czxgznghn5ryyw X-Forward-Email-Version: 9.0.0 Content-Type: multipart/mixed; boundary="--_NmP-179a735428ca7575-Part_1" From: some Message-ID: <69ad5fc2-91cb-728f-ae5c-eeedc5f267b6@example.net> Date: Wed, 25 May 2022 19:26:41 +0000 MIME-Version: 1.0 ----_NmP-179a735428ca7575-Part_1 Content-Type: multipart/alternative; boundary="--_NmP-179a735428ca7575-Part_2" ----_NmP-179a735428ca7575-Part_2 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit some random text ----_NmP-179a735428ca7575-Part_2 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit some random text ----_NmP-179a735428ca7575-Part_2-- ----_NmP-179a735428ca7575-Part_1 Content-Type: text/plain; name=text1.txt Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=text1.txt aGVsbG8gd29ybGQh ----_NmP-179a735428ca7575-Part_1-- ", "dkim": { "headerFrom": [ "random@sample.g0v.tw" ], "envelopeFrom": "test@example.net", "results": [ { "status": { "result": "none", "comment": "message not signed" }, "info": "dkim=none (message not signed)" } ] }, "spf": { "domain": "example.net", "client-ip": "127.0.0.1", "helo": "user.oem.local", "envelope-from": "test@example.net", "status": { "result": "none", "comment": "mx1.forwardemail.net: example.net does not designate permitted sender hosts", "smtp": { "mailfrom": "test@example.net", "helo": "user.oem.local" } }, "header": "Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1;", "info": "spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local", "lookups": { "limit": 50, "count": 1 } }, "arc": { "status": { "result": "none" }, "i": 0, "authResults": "mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled)" }, "dmarc": { "status": { "result": "none", "header": { "from": "sample.g0v.tw" } }, "domain": "sample.g0v.tw", "info": "dmarc=none header.from=sample.g0v.tw" }, "bimi": { "status": { "header": {}, "result": "skipped", "comment": "DMARC not enabled" }, "info": "bimi=skipped (DMARC not enabled)" }, "recipients": [ "webhook1@webhooks.net" ], "session": { "recipient": "webhook1@webhooks.net", "remoteAddress": "127.0.0.1", "remotePort": 65138, "clientHostname": "[127.0.0.1]", "hostNameAppearsAs": "user.oem.local", "sender": "test@example.net", "mta": "mx1.forwardemail.net", "arrivalDate": "2022-05-25T19:26:41.423Z", "arrivalTime": 1653506801423 } }

Question 64

Do you support regular expressions or regex?

Accepted Answer

Yes, as of September 27, 2021 we have added this feature. You can simply write regular expressions ("regex") for matching aliases and performing substitions.

Regular expression supported aliases are ones that start with a / and end with / and their recipients are email addresses or webhooks. The recipients can also include regex substitution support (e.g. $1, $2).

We support two regular expression flags including i and g. The case-insensitive flag of i is a permanent default and it is always enforced. The global flag of g can be added by you by affixing the ending / with /g.

Note that we also support our disabled alias feature for the recipient portion with our regex support.

Regular expressions are not supported on global vanity domains (as this could be a security vulnerability).

Enhanced Privacy Protection: If you are on a paid plan (which features enhanced privacy protection), then please go to My Account Domains and click on "Aliases" next to your domain to configure aliases, including those with regular expressions. If you would like to learn more about paid plans see our Pricing page.

Examples for Enhanced Privacy Protection

Alias Name Effect Test /^(linus|torvalds)$/ Emails to `linus@sample.g0v.tw` or `torvalds@sample.g0v.tw` (view test on RegExr) /^24highst(reet)$/ Emails to `24highst@sample.g0v.tw` or `24highstreet@sample.g0v.tw` (view test on RegExr)

Tip: To test these at RegExr, write the expression in the top box, and then type an example alias in the text box below. If it matches, it will turn blue.

Examples for the free plan

If you are on the free plan, then simply add a new DNS TXT record using one or more of the provided examples below:

Simple Example: If I want all emails that go to `linus@sample.g0v.tw` or `torvalds@sample.g0v.tw` to forward to `user@gmail.com`:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com

Firstname Lastname Substitution Example: Imagine all of your company email addresses are of the `firstname.lastname@sample.g0v.tw` pattern. If I want all emails that go to the pattern of `firstname.lastname@sample.g0v.tw` to forward to `firstname.lastname@company.com` with substitution support (view test on RegExr):

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^([A-Za-z]+)+\.([A-Za-z]+)+$/:$1.$2@company.com

Plus Symbol Filtering Substitution Example: If I want all emails that go to `info@sample.g0v.tw` or `support@sample.g0v.tw` to forward to `user+info@gmail.com` or `user+support@gmail.com` respectively (with substitution support) (view test on RegExr):

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(support|info)$/:user+$1@gmail.com

Webhook Querystring Substitution Example: Perhaps you want all emails that go to `sample.g0v.tw` to go to a webhook and have a dynamic querystring key of "to" with a value of the username portion of the email address (view test on RegExr):

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(.*?)$/:https://sample.g0v.tw/webhook?username=$1

Quiet reject example: If you want all emails that match a certain pattern to be disabled and quietly reject (appears to sender as if the message was sent successfully, but actually goes nowhere) with status code `250` (see Can I disable specific aliases), then simply use the same approach with a single exclamation mark "!". This indicates to the sender that the message was successfully delivered, but it actually went nowhere (e.g. blackhole or `/dev/null`).

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:!

Soft reject example: If you want all emails that match a certain pattern to be disabled and soft reject with status code `421` (see Can I disable specific aliases), then simply use the same approach with a double exclamation mark "!!". This indicates to the sender to retry their email, and emails to this alias will be retried for approximately 5 days and then reject permanently.

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:!!

Hard reject example: If you want all emails that match a certain pattern to be disabled and hard reject with status code `550` (see Can I disable specific aliases), then simply use the same approach with a triple exclamation mark "!!!". This indicates to the sender of a permanent error and emails will not retry, they will be rejected for this alias.

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:!!!

Tip: Curious how to write a regular expression or need to test your replacement? You can go to the free regular expression testing website RegExr at https://regexr.com.

Khách Hàng	Nghiên Cứu Trường Hợp
Học Viện Hải Quân Hoa Kỳ	📄 Nghiên Cứu Trường Hợp
Canonical	📄 Nghiên Cứu Trường Hợp
Netflix Games
The Linux Foundation	📄 Nghiên Cứu Trường Hợp
The PHP Foundation
Fox News Radio
Disney Ad Sales
jQuery	📄 Nghiên Cứu Trường Hợp
LineageOS
Ubuntu	📄 Nghiên Cứu Trường Hợp
Kubuntu	📄 Nghiên Cứu Trường Hợp
Lubuntu	📄 Nghiên Cứu Trường Hợp
Đại Học Cambridge	📄 Nghiên Cứu Trường Hợp
Đại Học Maryland	📄 Nghiên Cứu Trường Hợp
Đại Học Washington	📄 Nghiên Cứu Trường Hợp
Đại Học Tufts	📄 Nghiên Cứu Trường Hợp
Swarthmore College	📄 Nghiên Cứu Trường Hợp
Chính Phủ Nam Úc
Chính Phủ Cộng Hòa Dominican
Fly.io
RCD Hotels
Isaac Z. Schlueter (npm)	📄 Nghiên Cứu Trường Hợp
David Heinemeier Hansson (Ruby on Rails)

Loại	Tên máy chủ	Giao thức	Cổng
IMAP	`imap.forwardemail.net`	SSL/TLS Ưu tiên	`993` và `2993`
SMTP	`smtp.forwardemail.net`	SSL/TLS Khuyến nghị	`465` và `2465` cho SSL/TLS (khuyến nghị) hoặc `587`, `2587`, `2525`, và `25` cho STARTTLS

Định dạng	Phần mở rộng	Mô tả
`sqlite`	`.sqlite`	Bản chụp cơ sở dữ liệu SQLite được mã hóa thô (mặc định cho sao lưu IMAP tự động)
`mbox`	`.zip`	Tệp ZIP được bảo vệ bằng mật khẩu chứa hộp thư theo định dạng mbox
`eml`	`.zip`	Tệp ZIP được bảo vệ bằng mật khẩu chứa các tệp `.eml` riêng lẻ cho mỗi tin nhắn

Cờ	Mô tả
`--path <path>`	Đường dẫn đến file sao lưu SQLite được mã hóa
`--password <pass>`	Mật khẩu IMAP/bí danh để giải mã
`--output <path>`	Đường dẫn đầu ra cho file ZIP (mặc định: tự động tạo với dấu thời gian ISO 8601)
`--help`	Hiển thị thông báo trợ giúp

Nhà đăng ký	Các bước cấu hình
1&1	Đăng nhập Trung tâm tên miền (Chọn tên miền của bạn) Chỉnh sửa cài đặt DNS
Amazon Route 53	Đăng nhập Hosted Zones (Chọn tên miền của bạn)
Aplus.net	Đăng nhập My Servers Quản lý tên miền Trình quản lý DNS
Bluehost	DÀNH CHO ROCK: Đăng nhập Domains (Nhấn biểu tượng ▼ bên cạnh quản lý) DNS DÀNH CHO LEGACY: Đăng nhập Domains Zone editor (Chọn tên miền của bạn)
Cloudflare	Đăng nhập DNS
DNS Made Easy	Đăng nhập DNS (Chọn tên miền của bạn)
DNSimple	Đăng nhập (Chọn tên miền của bạn) DNS Quản lý
Digital Ocean	Đăng nhập Mạng Tên miền (Chọn tên miền của bạn) Thêm Quản lý tên miền
Domain.com	Đăng nhập Trong chế độ xem thẻ, nhấn quản lý tên miền Trong chế độ xem danh sách, nhấn biểu tượng bánh răng DNS & Nameservers Bản ghi DNS
Domains.com Xem	Đăng nhập (Chọn tên miền của bạn) Quản lý (nhấn biểu tượng bánh răng) Nhấn vào DNS & Nameservers trong menu bên trái
DreamHost	Đăng nhập Bảng điều khiển Tên miền Quản lý tên miền DNS
Dyn	Đăng nhập Tổng quan Quản lý Trình chỉnh sửa đơn giản Bản ghi
Gandi	Đăng nhập (Chọn tên miền của bạn) Quản lý Chỉnh sửa vùng
GoDaddy Xem	Đăng nhập Quản lý tên miền của tôi (Chọn tên miền của bạn) Quản lý DNS
Google Domains Xem	Đăng nhập (Chọn tên miền của bạn) Cấu hình DNS
Namecheap Xem	Đăng nhập Danh sách tên miền (Chọn tên miền của bạn) Quản lý DNS nâng cao
Netlify	Đăng nhập (Chọn tên miền của bạn) Thiết lập DNS Netlify
Network Solutions	Đăng nhập Quản lý tài khoản Tên miền của tôi (Chọn tên miền của bạn) Quản lý Thay đổi nơi tên miền trỏ đến DNS nâng cao
Shopify Xem	Đăng nhập Tên miền được quản lý (Chọn tên miền của bạn) Cài đặt DNS
Squarespace	Đăng nhập Menu chính Cài đặt Tên miền (Chọn tên miền của bạn) Cài đặt nâng cao Bản ghi tùy chỉnh
Vercel's Now	Sử dụng CLI "now" `now dns add [domain] '@' MX [record-value] [priority]`
Weebly	Đăng nhập Trang tên miền (Chọn tên miền của bạn) DNS
Wix	Đăng nhập Trang tên miền (Nhấn biểu tượng ) Chọn Quản lý bản ghi DNS
eNom	Đăng nhập Tên miền Tên miền của tôi
Khác	Quan trọng: Không thấy tên nhà đăng ký của bạn trong danh sách? Chỉ cần tìm kiếm trên Internet với từ khóa "cách thay đổi bản ghi DNS trên $REGISTRAR" (thay $REGISTRAR bằng tên nhà đăng ký của bạn – ví dụ "cách thay đổi bản ghi DNS trên GoDaddy" nếu bạn dùng GoDaddy).

Tên công cụ	URL	Loại
Cloudflare Domain Categorization Feedback	https://radar.cloudflare.com/domains/feedback	Phân loại
Spamhaus IP and Domain Reputation Checker	https://check.spamhaus.org/	DNSBL
Cisco Talos IP and Domain Reputation Center	https://talosintelligence.com/reputation_center	Uy tín
Barracuda IP and Domain Reputation Lookup	https://www.barracudacentral.org/lookups/lookup-reputation	DNSBL
MX Toolbox Blacklist Check	https://mxtoolbox.com/blacklists.aspx	Danh sách đen
Google Postmaster Tools	https://www.gmail.com/postmaster/	Uy tín
Yahoo Sender Hub	https://senders.yahooinc.com/	Uy tín
MultiRBL.valli.org Blacklist Check	https://multirbl.valli.org/lookup/	DNSBL
Sender Score	https://senderscore.org/act/blocklist-remover/	Uy tín
Invaluement	https://www.invaluement.com/lookup/	DNSBL
SURBL	https://www.surbl.org/	DNSBL
SpamCop	https://www.spamcop.net/bl.shtml	DNSBL
UCEPROTECT's Levels 1, 2, and 3	https://www.uceprotect.net/en/rblcheck.php	DNSBL
UCEPROTECT's backscatterer.org	https://www.backscatterer.org/	Bảo vệ chống phản hồi
UCEPROTECT's whitelisted.org	https://www.whitelisted.org/ (yêu cầu phí)	DNSWL

Nhà cung cấp	Biểu mẫu gỡ chặn / Liên hệ	Ghi chú
Google/Gmail	https://support.google.com/mail/contact/bulk_send_new	Biểu mẫu liên hệ người gửi hàng loạt
Microsoft (Outlook/Office 365/Hotmail)	https://sender.office.com	Cổng gỡ chặn IP Office 365
Yahoo/AOL/Verizon	https://senders.yahooinc.com/	Yahoo Sender Hub
Apple/iCloud	https://ipcheck.proofpoint.com/	Apple sử dụng Proofpoint cho uy tín IP
Proofpoint	https://ipcheck.proofpoint.com/	Kiểm tra và gỡ chặn IP Proofpoint
Barracuda Networks	https://www.barracudacentral.org/lookups/lookup-reputation	Tra cứu và gỡ chặn uy tín Barracuda
Cloudmark	https://csi.cloudmark.com/en/reset/	Yêu cầu đặt lại Cloudmark CSI
GoDaddy/SecureServer	https://unblock.secureserver.net	Biểu mẫu yêu cầu gỡ chặn IP GoDaddy
Comcast/Xfinity	https://spa.xfinity.com/report	Yêu cầu gỡ chặn IP Comcast
Charter/Spectrum	https://www.spectrum.net/support/internet/understanding-email-error-codes	Liên hệ hỗ trợ Spectrum để gỡ chặn
AT&T	`abuse_rbl@abuse-att.net`	Email yêu cầu gỡ chặn
Cox Communications	`unblock.request@cox.net`	Email yêu cầu gỡ chặn
CenturyLink/Lumen	`abuse@centurylink.com`	Sử dụng Cloudfilter
Windstream	`abuse@windstream.net`	Email yêu cầu gỡ chặn
t-online.de (Đức)	`tobr@rx.t-online.de`	Email yêu cầu gỡ chặn
Orange France	https://postmaster.orange.fr/	Sử dụng biểu mẫu liên hệ hoặc email `abuse@orange.fr`
GMX	https://postmaster.gmx.net/en/contact	Biểu mẫu liên hệ postmaster GMX
Mail.ru	https://postmaster.mail.ru/	Cổng postmaster Mail.ru
Yandex	https://postmaster.yandex.ru/	Cổng postmaster Yandex
QQ Mail (Tencent)	https://open.mail.qq.com/	Đăng ký whitelist QQ Mail (Tiếng Trung)
Netease (163.com)	https://mail.163.com/postmaster/	Cổng postmaster Netease
Alibaba/Aliyun/HiChina	https://www.alibabacloud.com/help/en/alibaba-mail/	Liên hệ qua bảng điều khiển Alibaba Cloud
Amazon SES	https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html	Bảng điều khiển AWS SES > Gỡ chặn danh sách đen
SendGrid	https://support.sendgrid.com/	Liên hệ hỗ trợ SendGrid
Mimecast	https://community.mimecast.com/	Sử dụng RBL bên thứ ba - liên hệ RBL cụ thể
Fastmail	https://www.fastmail.com/support/	Liên hệ hỗ trợ Fastmail
Zoho	https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address	Liên hệ hỗ trợ Zoho
ProtonMail	https://proton.me/support/contact	Liên hệ hỗ trợ Proton
Tutanota	https://tutanota.com/support	Liên hệ hỗ trợ Tutanota
Hushmail	https://www.hushmail.com/support/	Liên hệ hỗ trợ Hushmail
Mailbox.org	https://mailbox.org/en/support	Liên hệ hỗ trợ Mailbox.org
Posteo	https://posteo.de/en/site/contact	Liên hệ hỗ trợ Posteo
DuckDuckGo Email	https://duckduckgo.com/email/support	Liên hệ hỗ trợ DuckDuckGo
Sonic.net	https://www.sonic.com/support	Liên hệ hỗ trợ Sonic
Telus	https://www.telus.com/en/support	Liên hệ hỗ trợ Telus
Vodafone Germany	https://www.vodafone.de/hilfe/	Liên hệ hỗ trợ Vodafone
Xtra (Spark NZ)	https://www.spark.co.nz/help/	Liên hệ hỗ trợ Spark NZ
UOL/BOL (Brazil)	https://ajuda.uol.com.br/	Liên hệ hỗ trợ UOL (Tiếng Bồ Đào Nha)
Libero (Italy)	https://aiuto.libero.it/	Liên hệ hỗ trợ Libero (Tiếng Ý)
Telenet (Belgium)	https://www2.telenet.be/en/support/	Liên hệ hỗ trợ Telenet
Facebook/WhatsApp	https://www.facebook.com/business/help	Liên hệ hỗ trợ doanh nghiệp Facebook
LinkedIn	https://www.linkedin.com/help/linkedin	Liên hệ hỗ trợ LinkedIn
Groups.io	https://groups.io/helpcenter	Liên hệ hỗ trợ Groups.io
Earthlink/Vade Secure	https://sendertool.vadesecure.com/en/	Công cụ người gửi Vade Secure
Cloudflare Email Security	https://www.cloudflare.com/products/zero-trust/email-security/	Liên hệ hỗ trợ Cloudflare
Hornetsecurity/Expurgate	https://www.hornetsecurity.com/	Liên hệ hỗ trợ Hornetsecurity
SpamExperts/Antispamcloud	https://www.spamexperts.com/	Liên hệ qua nhà cung cấp hosting
Mail2World	https://www.mail2world.com/support/	Liên hệ hỗ trợ Mail2World

Tên	Định dạng	Nền tảng	URL GitHub
MBox Viewer	Mbox	Windows	https://github.com/eneam/mboxviewer
mbox-web-viewer	Mbox	Tất cả nền tảng	https://github.com/PHMRanger/mbox-web-viewer
EmlReader	EML	Windows	https://github.com/ayamadori/EmlReader
Email viewer	EML	VSCode	https://github.com/joelharkes/vscode_email_viewer
eml-reader	EML	Tất cả nền tảng	https://github.com/s0ph1e/eml-reader
Ngoài ra nếu bạn cần chuyển đổi file Mbox sang file EML, bạn có thể sử dụng https://github.com/noelmartinon/mboxzilla.

Nhà cung cấp Email	Định dạng Xuất	Hướng dẫn Xuất
Gmail	MBOX	https://takeout.google.com/settings/takeout/custom/gmail
Outlook	PST	Mẹo: Nếu bạn đang sử dụng Outlook (định dạng xuất PST), thì bạn có thể làm theo hướng dẫn trong phần "Khác" bên dưới. Tuy nhiên chúng tôi đã cung cấp các liên kết dưới đây để chuyển đổi PST sang định dạng MBOX/EML dựa trên hệ điều hành của bạn: Zinkuba cho Windows (GitHub) readpst cho Windows cygwin – (ví dụ `readpst -u -o $OUT_DIR $IN_DIR` thay thế `$OUT_DIR` và `$IN_DIR` bằng đường dẫn thư mục xuất và thư mục nhập tương ứng). readpst cho Ubuntu/Linux – (ví dụ `sudo apt-get install readpst` rồi `readpst -u -o $OUT_DIR $IN_DIR`, thay thế `$OUT_DIR` và `$IN_DIR` bằng đường dẫn thư mục xuất và thư mục nhập tương ứng). readpst cho macOS (qua brew) – (ví dụ `brew install libpst` rồi `readpst -u -o $OUT_DIR $IN_DIR`, thay thế `$OUT_DIR` và `$IN_DIR` bằng đường dẫn thư mục xuất và thư mục nhập tương ứng). PST Converter cho Windows (GitHub)
Apple Mail	MBOX	https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974
Fastmail	EML	https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail
Proton Mail	MBOX/EML	https://proton.me/support/export-emails-import-export-app
Tutanota	EML	https://github.com/crepererum-oss/tatutanatata
Gandi	EML	https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents
Zoho	EML	https://www.zoho.com/mail/help/import-export-emails.html#alink2
Khác	Sử dụng Thunderbird	Thiết lập tài khoản email hiện có của bạn trong Thunderbird rồi sử dụng plugin ImportExportTools NG để xuất và nhập email. Bạn cũng có thể đơn giản sao chép/dán hoặc kéo/thả email giữa các tài khoản với nhau.

Nền tảng	Kiến trúc	File
Linux	x64	`convert-sqlite-to-eml-linux-x64`
Linux	arm64	`convert-sqlite-to-eml-linux-arm64`
macOS	Apple Silicon	`convert-sqlite-to-eml-darwin-arm64`
Windows	x64	`convert-sqlite-to-eml-win-x64.exe`

Name/Host/Alias	TTL	Type	Priority	Answer/Value
"@", ".", hoặc để trống	3600	MX	0	`mx1.forwardemail.net`
"@", ".", hoặc để trống	3600	MX	0	`mx2.forwardemail.net`

Tên/Máy chủ/Bí danh	TTL	Loại	Trả lời/Giá trị
"@", ".", hoặc để trống	3600	TXT	`forward-email=hello:user@gmail.com,support:user@gmail.com`
"@", ".", hoặc để trống	3600	TXT	`forward-email=help:user@gmail.com,foo:user@gmail.com`
"@", ".", hoặc để trống	3600	TXT	`forward-email=orders:user@gmail.com,baz:user@gmail.com`
"@", ".", hoặc để trống	3600	TXT	`forward-email=info:user@gmail.com,beep:user@gmail.com`
"@", ".", hoặc để trống	3600	TXT	`forward-email=errors:user@gmail.com,boop:user@gmail.com`

Đăng nhập	Ví dụ	Mô tả
Tên đăng nhập	`user@sample.g0v.tw`	Địa chỉ email của một bí danh tồn tại cho miền tại Tài khoản của tôi Miền.
Mật khẩu	`************************`	Mật khẩu được tạo riêng cho bí danh.

Đăng nhập	Ví dụ	Mô tả
Tên đăng nhập	`user@sample.g0v.tw`	Địa chỉ email của bí danh tồn tại cho miền tại Tài khoản của tôi Miền.
Mật khẩu	`************************`	Mật khẩu được tạo riêng cho bí danh.

Ứng dụng Email	Nền tảng	Plugin Được Đề Xuất	Ghi chú
Thunderbird	Máy tính để bàn	Cấu hình OpenPGP trong Thunderbird	Thunderbird có hỗ trợ OpenPGP tích hợp sẵn.
Gmail	Trình duyệt	Mailvelope hoặc FlowCrypt (giấy phép độc quyền)	Gmail không hỗ trợ OpenPGP, tuy nhiên bạn có thể tải plugin mã nguồn mở Mailvelope hoặc FlowCrypt.
Apple Mail	macOS	Free-GPGMail	Apple Mail không hỗ trợ OpenPGP, tuy nhiên bạn có thể tải plugin mã nguồn mở Free-GPGMail.
Apple Mail	iOS	PGPro hoặc FlowCrypt (giấy phép độc quyền)	Apple Mail không hỗ trợ OpenPGP, tuy nhiên bạn có thể tải plugin mã nguồn mở PGPro hoặc FlowCrypt.
Outlook	Windows	gpg4win	Ứng dụng email máy tính để bàn Outlook không hỗ trợ OpenPGP, tuy nhiên bạn có thể tải plugin mã nguồn mở gpg4win.
Outlook	Trình duyệt	Mailvelope hoặc FlowCrypt (giấy phép độc quyền)	Ứng dụng email web Outlook không hỗ trợ OpenPGP, tuy nhiên bạn có thể tải plugin mã nguồn mở Mailvelope hoặc FlowCrypt.
Android	Di động	OpenKeychain hoặc FlowCrypt	Các ứng dụng email Android như Thunderbird Mobile và FairEmail đều hỗ trợ plugin mã nguồn mở OpenKeychain. Bạn cũng có thể sử dụng plugin mã nguồn mở (giấy phép độc quyền) FlowCrypt.
Google Chrome	Trình duyệt	Mailvelope hoặc FlowCrypt (giấy phép độc quyền)	Bạn có thể tải tiện ích mở rộng trình duyệt mã nguồn mở Mailvelope hoặc FlowCrypt.
Mozilla Firefox	Trình duyệt	Mailvelope hoặc FlowCrypt (giấy phép độc quyền)	Bạn có thể tải tiện ích mở rộng trình duyệt mã nguồn mở Mailvelope hoặc FlowCrypt.
Microsoft Edge	Trình duyệt	Mailvelope	Bạn có thể tải tiện ích mở rộng trình duyệt mã nguồn mở Mailvelope.
Brave	Trình duyệt	Mailvelope hoặc FlowCrypt (giấy phép độc quyền)	Bạn có thể tải tiện ích mở rộng trình duyệt mã nguồn mở Mailvelope hoặc FlowCrypt.
Balsa	Máy tính để bàn	Cấu hình OpenPGP trong Balsa	Balsa có hỗ trợ OpenPGP tích hợp sẵn.
KMail	Máy tính để bàn	Cấu hình OpenPGP trong KMail	KMail có hỗ trợ OpenPGP tích hợp sẵn.
GNOME Evolution	Máy tính để bàn	Cấu hình OpenPGP trong Evolution	GNOME Evolution có hỗ trợ OpenPGP tích hợp sẵn.
Terminal	Máy tính để bàn	Cấu hình gpg trong Terminal	Bạn có thể sử dụng công cụ dòng lệnh mã nguồn mở gpg để tạo khóa mới từ dòng lệnh.

Tiện Ích Mở Rộng	Lý Do
`include`	Rủi ro bảo mật (chèn script) và yêu cầu lưu trữ script toàn cục
`mboxmetadata` / `servermetadata`	Yêu cầu hỗ trợ tiện ích mở rộng IMAP METADATA
`foreverypart` / `mime` / `extracttext` / `replace` / `enclose`	Chưa triển khai thao tác phức tạp trên cây MIME

Ứng dụng Email	Nền tảng	Ghi chú
Apple Mail	macOS	Hỗ trợ S/MIME tích hợp sẵn. Vào Mail > Preferences > Accounts > tài khoản của bạn > Trust để cấu hình chứng chỉ.
Apple Mail	iOS	Hỗ trợ S/MIME tích hợp sẵn. Vào Settings > Mail > Accounts > tài khoản của bạn > Advanced > S/MIME để cấu hình.
Microsoft Outlook	Windows	Hỗ trợ S/MIME tích hợp sẵn. Vào File > Options > Trust Center > Trust Center Settings > Email Security để cấu hình.
Microsoft Outlook	macOS	Hỗ trợ S/MIME tích hợp sẵn. Vào Tools > Accounts > Advanced > Security để cấu hình.
Thunderbird	Desktop	Hỗ trợ S/MIME tích hợp sẵn. Vào Account Settings > End-To-End Encryption > S/MIME để cấu hình.
GNOME Evolution	Desktop	Hỗ trợ S/MIME tích hợp sẵn. Vào Edit > Preferences > Mail Accounts > tài khoản của bạn > Security để cấu hình.
KMail	Desktop	Hỗ trợ S/MIME tích hợp sẵn. Vào Settings > Configure KMail > Identities > danh tính của bạn > Cryptography để cấu hình.

Phần mở rộng	RFC	Mô tả
`fileinto`	RFC 5228	Lưu tin nhắn vào các thư mục cụ thể
`reject` / `ereject`	RFC 5429	Từ chối tin nhắn với lỗi
`vacation`	RFC 5230	Trả lời tự động khi nghỉ/vắng mặt
`vacation-seconds`	RFC 6131	Khoảng thời gian trả lời nghỉ chi tiết hơn
`imap4flags`	RFC 5232	Đặt cờ IMAP (\Seen, \Flagged, v.v.)
`envelope`	RFC 5228	Kiểm tra người gửi/người nhận trong phong bì
`body`	RFC 5173	Kiểm tra nội dung thân tin nhắn
`variables`	RFC 5229	Lưu trữ và sử dụng biến trong kịch bản
`relational`	RFC 5231	So sánh quan hệ (lớn hơn, nhỏ hơn)
`comparator-i;ascii-numeric`	RFC 4790	So sánh số học
`copy`	RFC 3894	Sao chép tin nhắn khi chuyển tiếp
`editheader`	RFC 5293	Thêm hoặc xóa tiêu đề tin nhắn
`date`	RFC 5260	Kiểm tra giá trị ngày/giờ
`index`	RFC 5260	Truy cập các lần xuất hiện tiêu đề cụ thể
`regex`	draft-ietf-sieve-regex	So khớp biểu thức chính quy
`enotify`	RFC 5435	Gửi thông báo (ví dụ: mailto:)
`environment`	RFC 5183	Truy cập thông tin môi trường
`mailbox`	RFC 5490	Kiểm tra sự tồn tại hộp thư, tạo hộp thư
`special-use`	RFC 8579	Lưu vào các hộp thư đặc biệt (\Junk, \Trash)
`duplicate`	RFC 7352	Phát hiện tin nhắn trùng lặp
`ihave`	RFC 5463	Kiểm tra sự có mặt của phần mở rộng
`subaddress`	RFC 5233	Truy cập các phần địa chỉ user+detail

Tên bí danh	Hiệu quả	Kiểm tra
`/^(linus\|torvalds)$/`	Email gửi đến `linus@sample.g0v.tw` hoặc `torvalds@sample.g0v.tw`	(xem kiểm tra trên RegExr)
`/^24highst(reet)$/`	Email gửi đến `24highst@sample.g0v.tw` hoặc `24highstreet@sample.g0v.tw`	(xem kiểm tra trên RegExr)

Giao thức	Tên máy chủ	Cổng	IPv4	IPv6	Ghi chú
`SSL/TLS` Ưu tiên	`smtp.forwardemail.net`	`465`, `2465`	✅	✅	TLS 1.2+ hiện đại (Khuyến nghị)
`TLS` (STARTTLS)	`smtp.forwardemail.net`	`587`, `2587`, `2525`, `25`	✅	✅	Hỗ trợ (ưu tiên cổng SSL/TLS `465`)
`SSL/TLS` Chỉ dành cho cũ	`smtp.forwardemail.net`	`2455`	✅	✅	⚠️ TLS 1.0 chỉ dành cho thiết bị cũ
`TLS` (STARTTLS) Chỉ dành cho cũ	`smtp.forwardemail.net`	`2555`	✅	✅	⚠️ TLS 1.0 chỉ dành cho thiết bị cũ
Đăng nhập	Ví dụ	Mô tả
---------	--------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Tên đăng nhập	`user@sample.g0v.tw`	Địa chỉ email của bí danh tồn tại cho miền tại Tài khoản của tôi Miền.
Mật khẩu	`************************`	Bí danh

Giao thức	Tên máy chủ	Cổng	IPv4	IPv6
`SSL/TLS` Ưu tiên	`pop3.forwardemail.net`	`995`, `2995`	✅	✅
Đăng nhập	Ví dụ	Mô tả
---------	--------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Tên đăng nhập	`user@sample.g0v.tw`	Địa chỉ email của bí danh tồn tại cho miền tại Tài Khoản Của Tôi Miền.
Mật khẩu	`************************`	Mật khẩu được tạo riêng cho bí danh.

Loại	Tên/Host	Đích/Giá trị
CNAME	`autoconfig`	`autoconfig.forwardemail.net`
CNAME	`autodiscover`	`autodiscover.forwardemail.net`

Loại	Tên/Host	Ưu tiên	Trọng số	Cổng	Đích/Giá trị	Mục đích
SRV	`_imaps._tcp`	0	1	993	`imap.forwardemail.net`	IMAP qua SSL/TLS (ưu tiên)
SRV	`_imap._tcp`	0	0	0	`.`	IMAP không mã hóa bị vô hiệu hóa
SRV	`_submissions._tcp`	0	1	465	`smtp.forwardemail.net`	Gửi SMTP (SSL/TLS, khuyến nghị)
SRV	`_submission._tcp`	5	1	587	`smtp.forwardemail.net`	Gửi SMTP (STARTTLS)
SRV	`_pop3s._tcp`	10	1	995	`pop3.forwardemail.net`	POP3 qua SSL/TLS
SRV	`_pop3._tcp`	0	0	0	`.`	POP3 không mã hóa bị vô hiệu hóa
SRV	`_caldavs._tcp`	0	1	443	`caldav.forwardemail.net`	CalDAV qua TLS (lịch)
SRV	`_caldav._tcp`	0	0	0	`.`	CalDAV không mã hóa bị vô hiệu hóa
SRV	`_carddavs._tcp`	0	1	443	`carddav.forwardemail.net`	CardDAV qua TLS (danh bạ)
SRV	`_carddav._tcp`	0	0	0	`.`	CardDAV không mã hóa bị vô hiệu hóa

Ứng dụng	Email	CalDAV/CardDAV
Thunderbird	Bản ghi `autoconfig` CNAME hoặc SRV	Bản ghi `autoconfig` XML hoặc SRV (RFC 6764)
Apple Mail (macOS)	Bản ghi SRV (RFC 6186)	Bản ghi SRV (RFC 6764)
Apple Mail (iOS)	Bản ghi SRV (RFC 6186)	Bản ghi SRV (RFC 6764)
Microsoft Outlook	Bản ghi `autodiscover` CNAME hoặc SRV `_autodiscover._tcp`	Không hỗ trợ
GNOME (Evolution)	Bản ghi SRV (RFC 6186)	Bản ghi SRV (RFC 6764)
KDE (KMail)	Bản ghi SRV (RFC 6186)	Bản ghi SRV (RFC 6764)
eM Client	`autoconfig` hoặc `autodiscover`	Bản ghi SRV (RFC 6764)

Nhà cung cấp	Chứng nhận Khung Bảo mật Dữ liệu	Trang Tuân thủ GDPR
Cloudflare	✅ Có	https://www.cloudflare.com/trust-hub/gdpr/
DataPacket	❌ Không	https://www.datapacket.com/privacy-policy
DigitalOcean	❌ Không	https://www.digitalocean.com/legal/gdpr
GitHub	✅ Có	https://docs.github.com/en/site-policy/privacy-policies/github-data-protection-agreement
Vultr	❌ Không	https://www.vultr.com/legal/eea-gdpr-privacy/

Tên/Máy chủ/Bí danh	TTL	Loại	Trả lời/Giá trị
"@", ".", hoặc để trống	3600	TXT	`forward-email=hello:user+a@gmail.com`
"@", ".", hoặc để trống	3600	TXT	`forward-email=hello:user+b@gmail.com`

Câu Hỏi Thường Gặp

Bắt Đầu Nhanh

Giới Thiệu

Forward Email là gì

Ai sử dụng Forward Email

Lịch sử của Forward Email

Dịch vụ này nhanh như thế nào

Các ứng dụng Email

Thunderbird

Microsoft Outlook

Apple Mail

eM Client

Thiết bị di động

Cấu hình Sendmail SMTP Relay

Cấu hình

Kiểm tra

Cấu hình Exim4 SMTP Relay

Cấu hình

Kiểm tra

Cấu hình msmtp SMTP Client

Cấu hình

Kiểm tra

Các trình khách email dòng lệnh

Cấu hình email trên Windows

Cấu hình chuyển tiếp SMTP Postfix

Cài đặt

Cấu hình

Kiểm tra

Cách gửi thư dưới dạng sử dụng Gmail

Hướng dẫn miễn phí cũ cho Send Mail As sử dụng Gmail

Cấu hình định tuyến Gmail nâng cao

Cấu hình định tuyến Outlook nâng cao

Khắc phục sự cố

Tại sao tôi không nhận được email thử nghiệm của mình

Làm thế nào để cấu hình trình khách email của tôi để làm việc với Forward Email

Tại sao email của tôi lại vào thư mục Spam và Junk và làm thế nào để kiểm tra uy tín tên miền của tôi

Công cụ kiểm tra uy tín và danh sách chặn

Biểu mẫu yêu cầu gỡ chặn IP theo nhà cung cấp

Tôi nên làm gì nếu nhận được email rác

Tại sao các email thử nghiệm gửi cho chính tôi trong Gmail lại hiển thị là "đáng ngờ"

Tôi có thể loại bỏ phần via forwardemail dot net trong Gmail không

Quản lý dữ liệu

Máy chủ của bạn đặt ở đâu

Làm thế nào để xuất và sao lưu hộp thư của tôi

Làm thế nào để tôi nhập và di chuyển hộp thư hiện có của mình

Làm thế nào để tôi sử dụng bộ nhớ tương thích S3 của riêng tôi cho việc sao lưu

Thiết lập

Cách hoạt động của sao lưu

Backup Formats

File Naming and Key Structure

Data Ownership and Deletion Policy

Security

Thông báo lỗi

API

Làm thế nào để chuyển đổi bản sao lưu SQLite sang file EML

Cài đặt

Cách sử dụng

Định Dạng Đầu Ra

Cách Thức Hoạt Động

Bạn có hỗ trợ tự lưu trữ không

Cấu Hình Email

Làm thế nào để bắt đầu và thiết lập chuyển tiếp email

Tôi có thể sử dụng nhiều máy chủ MX và máy chủ cho chuyển tiếp nâng cao không

Làm thế nào để tôi thiết lập trả lời tự động khi đi nghỉ (trả lời tự động khi vắng mặt)

Làm thế nào để tôi thiết lập SPF cho Forward Email

Làm thế nào để thiết lập DKIM cho Forward Email

Làm thế nào để thiết lập DMARC cho Forward Email

Làm thế nào để xem Báo Cáo DMARC

Làm thế nào để kết nối và cấu hình danh bạ của tôi

Làm thế nào để kết nối và cấu hình lịch của tôi

Làm thế nào để thêm nhiều lịch hơn và quản lý các lịch hiện có

Làm thế nào để kết nối và cấu hình tác vụ và nhắc nhở

Tại sao tôi không thể tạo tác vụ trong macOS Reminders

Làm thế nào để thiết lập Tasks.org trên Android

Làm thế nào để thiết lập SRS cho Forward Email

Làm thế nào để thiết lập MTA-STS cho Forward Email

Làm thế nào để thêm ảnh hồ sơ vào địa chỉ email của tôi

Tính Năng Nâng Cao

Bạn có hỗ trợ bản tin hoặc danh sách gửi thư cho email liên quan đến marketing không

Bạn có hỗ trợ gửi email bằng API không

Tên/Máy chủ/Bí danh	TTL	Loại	Trả lời/Giá trị
"@", ".", hoặc để trống	3600	TXT	`forward-email=user+a@gmail.com`
@, ".", hoặc để trống	3600	TXT	`forward-email=user+b@gmail.com`