Q: What is Forward Email's history?

You can learn more about Forward Email on our About page .

Q: Mobile Devices

For iOS: Go to Settings → Mail → Accounts → Add Account → Other Tap Add Mail Account and enter your details For server settings, use the same IMAP and SMTP settings as above For Android: Go to Settings → Accounts → Add Account → Personal (IMAP) Enter your Forward Email address and password For server settings, use the same IMAP and SMTP settings as above

Question 1

What is Forward Email?

Accepted Answer

Note

Forward Email is perfect for individuals, small businesses, and developers who want professional email addresses without the cost and maintenance of a full email hosting solution.

Forward Email is a fully featured email service provider and email hosting provider for custom domain names.

It's the only free and open-source service, and lets you use custom domain email addresses without the complexity of setting up and maintaining your own email server.

Our service forwards emails sent to your custom domain to your existing email account – and you can even use us as your dedicated email hosting provider.

Key features of Forward Email:

Custom Domain Email: Use professional email addresses with your own domain name
Free Tier: Basic email forwarding at no cost
Enhanced Privacy: We don't read your emails or sell your data
Open Source: Our entire codebase is available on GitHub
SMTP, IMAP, and POP3 Support: Full email sending and receiving capabilities
End-to-End Encryption: Support for OpenPGP/MIME
Custom Catch-All Aliases: Create unlimited email aliases

You can compare us to 56+ other email service providers on our Email Comparison page.

Tip

Learn more about Forward Email by reading our free Technical Whitepaper

Question 2

Who uses Forward Email?

Accepted Answer

We provide email hosting and email forwarding service to 500,000+ domains and these notable users:

Customer Case Study U.S. Naval Academy :page_facing_up: Case Study Canonical :page_facing_up: Case Study Netflix Games The Linux Foundation :page_facing_up: Case Study The PHP Foundation Fox News Radio Disney Ad Sales jQuery :page_facing_up: Case Study LineageOS Ubuntu :page_facing_up: Case Study Kubuntu :page_facing_up: Case Study Lubuntu :page_facing_up: Case Study The University of Cambridge :page_facing_up: Case Study The University of Maryland :page_facing_up: Case Study The University of Washington :page_facing_up: Case Study Tufts University :page_facing_up: Case Study Swarthmore College :page_facing_up: Case Study Government of South Australia Government of Dominican Republic Fly.io RCD Hotels Isaac Z. Schlueter (npm) :page_facing_up: Case Study David Heinemeier Hansson (Ruby on Rails)

Question 3

What is Forward Email's history?

Accepted Answer

You can learn more about Forward Email on our About page.

Question 4

How fast is this service?

Accepted Answer

Note

Our system is designed for speed and reliability, with multiple redundant servers to ensure your emails are delivered promptly.

Forward Email delivers messages with minimal delay, typically within seconds of receipt.

Performance metrics:

Average Delivery Time: Less than 5-10 seconds from receipt to forwarding (see our Time to Inbox "TTI" monitoring page)
Uptime: 99.9%+ service availability
Global Infrastructure: Servers strategically located for optimal routing
Automatic Scaling: Our system scales during peak email periods

We operate in real-time, unlike other providers which rely upon delayed queues.

We do not write to disk or store logs – with the exception of errors and outbound SMTP (see our Privacy Policy).

Everything is done in-memory and our source code is on GitHub.

Question 5

Thunderbird

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open Thunderbird and go to Edit → Account Settings → Account Actions → Add Mail Account
Enter your name, Forward Email address, and password
Click Configure manually and enter:
- Incoming: IMAP, imap.forwardemail.net, port 993, SSL/TLS
- Outgoing: SMTP, smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
Click Done

Question 6

Microsoft Outlook

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to File → Add Account
Enter your Forward Email address and click Connect
Choose Advanced options and select Let me set up my account manually
Select IMAP and enter:
- Incoming: imap.forwardemail.net, port 993, SSL
- Outgoing: smtp.forwardemail.net, port 465, SSL/TLS (recommended; port 587 with STARTTLS is also supported)
- Username: Your full email address
- Password: Your generated password
Click Connect

Question 7

Apple Mail

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Go to Mail → Preferences → Accounts → +
Select Other Mail Account
Enter your name, Forward Email address, and password
For server settings, enter:
- Incoming: imap.forwardemail.net
- Outgoing: smtp.forwardemail.net
- Username: Your full email address
- Password: Your generated password
Click Sign In

Question 8

eM Client

Accepted Answer

Create a new alias and generate a password in your Forward Email dashboard
Open eM Client and go to Menu → Accounts → + Add Account
Click on Mail and then select Other
Enter your Forward Email address and click Next
Enter the following server settings:
- Incoming server: imap.forwardemail.net
- Outgoing server: smtp.forwardemail.net
Enter your full email address as the User name and your generated password as the Password for both incoming and outgoing servers.
eM Client will test the connection. Once it passes, click Next.
Enter your name and choose an account name.
Click Finish.

Question 9

Mobile Devices

Accepted Answer

For iOS:

Go to Settings → Mail → Accounts → Add Account → Other
Tap Add Mail Account and enter your details
For server settings, use the same IMAP and SMTP settings as above

For Android:

Go to Settings → Accounts → Add Account → Personal (IMAP)
Enter your Forward Email address and password
For server settings, use the same IMAP and SMTP settings as above

Question 10

Sendmail SMTP Relay Configuration

Accepted Answer

You can configure Sendmail to relay emails through Forward Email's SMTP servers. This is a common setup for legacy systems or applications that rely on Sendmail.

Estimated Setup Time: Less than 20 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Edit your sendmail.mc file, typically located at /etc/mail/sendmail.mc:
sudo nano /etc/mail/sendmail.mc
Add the following lines to define the smart host and authentication:
define(`SMART_HOST', `smtp.forwardemail.net')dnl define(`RELAY_MAILER_ARGS', `TCP $h 465')dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl FEATURE(`authinfo',`hash -o /etc/mail/authinfo.db')dnl
Create the authentication file /etc/mail/authinfo:
sudo nano /etc/mail/authinfo
Add your Forward Email credentials to the authinfo file:
AuthInfo:smtp.forwardemail.net "U:your-alias@yourdomain.com" "P:your-generated-password" "M:PLAIN"
Generate the authentication database and secure the files:
sudo makemap hash /etc/mail/authinfo < /etc/mail/authinfo sudo chmod 600 /etc/mail/authinfo /etc/mail/authinfo.db
Rebuild the Sendmail configuration and restart the service:
sudo make -C /etc/mail sudo systemctl restart sendmail

Testing

Send a test email to verify the configuration:

echo "Test email from Sendmail" | mail -s "Sendmail Test" recipient@sample.g0v.tw

Question 11

Exim4 SMTP Relay Configuration

Accepted Answer

Exim4 is a popular MTA on Debian-based systems. You can configure it to use Forward Email as a smarthost.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Run the Exim4 configuration tool:
sudo dpkg-reconfigure exim4-config
Select the following options:
- General type of mail configuration: mail sent by smarthost; received via SMTP or fetchmail
- System mail name: your.hostname
- IP-addresses to listen on for incoming SMTP connections: 127.0.0.1 ; ::1
- Other destinations for which mail is accepted: (leave blank)
- Domains to relay mail for: (leave blank)
- IP address or host name of the outgoing smarthost: smtp.forwardemail.net::465
- Hide local mail name in outgoing mail? No
- Keep number of DNS-queries minimal (Dial-on-Demand)? No
- Delivery method for local mail: Mbox format in /var/mail/
- Split configuration into small files? No
Edit the passwd.client file to add your credentials:
sudo nano /etc/exim4/passwd.client
Add the following line:
smtp.forwardemail.net:your-alias@yourdomain.com:your-generated-password
Update the configuration and restart Exim4:
sudo update-exim4.conf sudo systemctl restart exim4

Testing

Send a test email:

echo "Test from Exim4" | mail -s "Exim4 Test" recipient@sample.g0v.tw

Question 12

msmtp SMTP Client Configuration

Accepted Answer

msmtp is a lightweight SMTP client that's useful for sending emails from scripts or command-line applications.

Estimated Setup Time: Less than 10 minutes

Important: This requires a paid plan with SMTP access enabled.

Configuration

Create or edit the msmtp configuration file at ~/.msmtprc:
nano ~/.msmtprc
Add the following configuration:
defaults auth on tls on tls_trust_file /etc/ssl/certs/ca-certificates.crt logfile ~/.msmtp.log account forwardemail host smtp.forwardemail.net port 465 tls_starttls off from your-alias@yourdomain.com user your-alias@yourdomain.com password your-generated-password account default : forwardemail
Set the correct permissions for the configuration file:
chmod 600 ~/.msmtprc

Testing

Send a test email:

echo "This is a test email from msmtp" | msmtp -a default recipient@sample.g0v.tw

Question 13

Command-line Email Clients

Accepted Answer

Popular command-line email clients like Mutt, NeoMutt, and Alpine can be configured to use Forward Email's SMTP servers for sending mail. The configuration will be similar to the msmtp setup, where you provide the SMTP server details and your credentials in the respective configuration files (.muttrc, .neomuttrc, or .pinerc).

Question 14

Windows Email Configuration

Accepted Answer

For Windows users, you can configure popular email clients like Microsoft Outlook and eM Client using the IMAP and SMTP settings provided in your Forward Email account. For command-line or scripting use, you can use PowerShell's Send-MailMessage cmdlet (though it is considered obsolete) or a lightweight SMTP relay tool like E-MailRelay.

Question 15

Postfix SMTP Relay Configuration

Accepted Answer

You can configure Postfix to relay emails through Forward Email's SMTP servers. This is useful for server applications that need to send emails.

Estimated Setup Time: Less than 15 minutes

Important: This requires a paid plan with SMTP access enabled.

Installation

Install Postfix on your server:

Question 16

How to Send Mail As using Gmail?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds").
When prompted for "Email address", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.forwardemail.net and change the port to 465
When prompted for "Username", enter the full email address of an alias you created under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
When prompted for "Password", paste the password from Generate Password in step 3 above
Select the radio button for "Secured connection using SSL"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Congratulations! You've successfully completed all steps.

Question 17

What is the legacy free guide for Send Mail As using Gmail?

Accepted Answer

Important: This legacy free guide is deprecated as of May 2023 since we now support outbound SMTP. If you use the guide below, then this will cause your outbound email to say "via forwardemail dot net" in Gmail.

Estimated Setup Time: Less than 10 minutes

Getting Started: If you've followed the instructions above under How do I get started and set up email forwarding, then you can continue reading below.

You need to have [Gmail's Two-Factor Authentication][gmail-2fa] enabled for this to work. Visit https://www.google.com/landing/2step/ if you do not have it enabled.
Once Two-Factor Authentication is enabled (or if you already had it enabled), then visit https://myaccount.google.com/apppasswords.
When prompted for "Select the app and device you want to generate the app password for":
Copy the password to your clipboard that is automatically generated

Important: If you are using G Suite, visit your admin panel Apps G Suite Settings for Gmail Settings and make sure to check "Allow users to send mail through an external SMTP server...". There will be some delay for this change to be activated, so please wait a few minutes.
Go to Gmail and under Settings Accounts and Import Send mail as, click "Add another email address"
When prompted for "Name", enter the name that you want your email to be seen as "From" (e.g. "Linus Torvalds")
When prompted for "Email address", enter the email address with the custom domain you used above (e.g. hello@sample.g0v.tw)
Uncheck "Treat as an alias"
Click "Next Step" to proceed
When prompted for "SMTP Server", enter smtp.gmail.com and leave the port as 587
When prompted for "Username", enter the portion of your Gmail address without the gmail.com part (e.g. just "user" if my email is user@gmail.com)

Important: If the "Username" portion is autofilled, then you will need to change this to the username portion of your Gmail address instead.
When prompted for "Password", paste from your clipboard the password you generated in step 2 above
Leave the radio button checked for "Secured connection using TLS"
Click "Add Account" to proceed
Open a new tab to Gmail and wait for your verification email to arrive (you will receive a verification code that confirms you are the owner of the email address you are attempting to "Send Mail As")
Once it arrives, copy and paste the verification code at the prompt you received in the previous step
Once you've done that, go back to the email and click the link to "confirm the request". You will most likely need to do this step and the previous step for the email to be correctly configured.

Question 18

Advanced Gmail Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

If you want to set up advanced routing in Gmail so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges, follow these steps:

Log in to your Google Admin console at admin.google.com
Go to Apps → Google Workspace → Gmail → Routing
Click on Add Route and configure the following settings:

Single Recipient Settings:

Select "Change envelope recipient" and enter your primary Gmail address
Check "Add X-Gm-Original-To header with original recipient"

Envelope Recipient Patterns:

Add a pattern that matches all non-existent mailboxes (e.g., .*@yourdomain.com)

Email Server Settings:

Select "Route to host" and enter mx1.forwardemail.net as the primary server
Add mx2.forwardemail.net as the backup server
Set port to 25
Select "Require TLS" for security

Click Save to create the route

Important: This configuration will only work for Google Workspace accounts with custom domains, not for regular Gmail accounts.

Question 19

Advanced Outlook Routing Configuration

Accepted Answer

Estimated Setup Time: 15-30 minutes

For Microsoft 365 (formerly Office 365) users who want to set up advanced routing so that aliases that don't match a mailbox will forward to Forward Email's mail exchanges:

Log in to the Microsoft 365 admin center at admin.microsoft.com
Go to Exchange → Mail flow → Rules
Click Add a rule and select Create a new rule
Name your rule (e.g., "Forward non-existent mailboxes to Forward Email")
Under Apply this rule if, select:
- "The recipient address matches..."
- Enter a pattern that matches all addresses at your domain (e.g., *@yourdomain.com)
Under Do the following, select:
- "Redirect the message to..."
- Choose "The following mail server"
- Enter mx1.forwardemail.net and port 25
- Add mx2.forwardemail.net as a backup server
Under Except if, select:
- "The recipient is..."
- Add all your existing mailboxes that should not be forwarded
Set the rule priority to ensure it runs after other mail flow rules
Click Save to activate the rule

Question 20

Why am I not receiving my test emails?

Accepted Answer

If you're sending a test email to yourself, then it may not show up in your inbox because it has the same "Message-ID" header.

This is a widely known issue, and also affects services such as Gmail. Here is the official Gmail answer regarding this issue.

If you continue to have issues, then it is most likely to be an issue with DNS propagation. You will need to wait a bit longer and try again (or try setting a lower TTL value on your TXT records).

Still having issues? Please contact us so we can help investigate the issue and find a quick resolution.

Question 21

How do I configure my email client to work with Forward Email?

Accepted Answer

Our service works with popular email clients such as:

Your username is your alias' email address and password is from Generate Password ("Normal Password").

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".

Type Hostname Protocol Ports IMAP imap.forwardemail.net SSL/TLS Preferred 993 and 2993 SMTP smtp.forwardemail.net SSL/TLS Recommended 465 and 2465 for SSL/TLS (recommended) or 587, 2587, 2525, and 25 for STARTTLS

Question 22

Why are my emails landing in Spam and Junk and how can I check my domain reputation?

Accepted Answer

This section guides you if your outbound mail is using our SMTP servers (e.g. smtp.forwardemail.net) (or forwarded via mx1.forwardemail.net or mx2.forwardemail.net) and it is being delivered in the Spam or Junk folder of recipients.

We routinely monitor our IP addresses against all reputable DNS denylists, therefore it is most likely a domain-reputation specific issue.

Emails can land in spam folders for several reasons:

Missing Authentication: Set up SPF, DKIM, and DMARC records.
Domain Reputation: New domains often have neutral reputation until they establish a sending history.
Content Triggers: Certain words or phrases can trigger spam filters.
Sending Patterns: Sudden increases in email volume can look suspicious.

You can try to use one or more of these tools to check your domain's reputation and categorization:

Reputation and Blocklist Check Tools

Tool Name URL Type Cloudflare Domain Categorization Feedback https://radar.cloudflare.com/domains/feedback Categorization Spamhaus IP and Domain Reputation Checker https://check.spamhaus.org/ DNSBL Cisco Talos IP and Domain Reputation Center https://talosintelligence.com/reputation_center Reputation Barracuda IP and Domain Reputation Lookup https://www.barracudacentral.org/lookups/lookup-reputation DNSBL MX Toolbox Blacklist Check https://mxtoolbox.com/blacklists.aspx Blacklist Google Postmaster Tools https://www.gmail.com/postmaster/ Reputation Yahoo Sender Hub https://senders.yahooinc.com/ Reputation MultiRBL.valli.org Blacklist Check https://multirbl.valli.org/lookup/ DNSBL Sender Score https://senderscore.org/act/blocklist-remover/ Reputation Invaluement https://www.invaluement.com/lookup/ DNSBL SURBL https://www.surbl.org/ DNSBL SpamCop https://www.spamcop.net/bl.shtml DNSBL UCEPROTECT's Levels 1, 2, and 3 https://www.uceprotect.net/en/rblcheck.php DNSBL UCEPROTECT's backscatterer.org https://www.backscatterer.org/ Backscatter Protection UCEPROTECT's whitelisted.org https://www.whitelisted.org/ (requires a fee) DNSWL

IP Removal Request Forms by Provider

If your IP address has been blocked by a specific email provider, use the appropriate removal form or contact below:

Provider Removal Form / Contact Notes Google/Gmail https://support.google.com/mail/contact/bulk_send_new Bulk sender contact form Microsoft (Outlook/Office 365/Hotmail) https://sender.office.com Office 365 IP delist portal Yahoo/AOL/Verizon https://senders.yahooinc.com/ Yahoo Sender Hub Apple/iCloud https://ipcheck.proofpoint.com/ Apple uses Proofpoint for IP reputation Proofpoint https://ipcheck.proofpoint.com/ Proofpoint IP check and removal Barracuda Networks https://www.barracudacentral.org/lookups/lookup-reputation Barracuda reputation lookup and removal Cloudmark https://csi.cloudmark.com/en/reset/ Cloudmark CSI reset request GoDaddy/SecureServer https://unblock.secureserver.net GoDaddy IP unblock request form Comcast/Xfinity https://spa.xfinity.com/report Comcast IP removal request Charter/Spectrum https://www.spectrum.net/support/internet/understanding-email-error-codes Contact Spectrum support for removal AT&T abuse_rbl@abuse-att.net Email for removal request Cox Communications unblock.request@cox.net Email for removal request CenturyLink/Lumen abuse@centurylink.com Uses Cloudfilter Windstream abuse@windstream.net Email for removal request t-online.de (Germany) tobr@rx.t-online.de Email for removal request Orange France https://postmaster.orange.fr/ Use contact form or email abuse@orange.fr GMX https://postmaster.gmx.net/en/contact GMX postmaster contact form Mail.ru https://postmaster.mail.ru/ Mail.ru postmaster portal Yandex https://postmaster.yandex.ru/ Yandex postmaster portal QQ Mail (Tencent) https://open.mail.qq.com/ QQ Mail whitelist application (Chinese) Netease (163.com) https://mail.163.com/postmaster/ Netease postmaster portal Alibaba/Aliyun/HiChina https://www.alibabacloud.com/help/en/alibaba-mail/ Contact via Alibaba Cloud console Amazon SES https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html AWS SES console > Blacklist Removal SendGrid https://support.sendgrid.com/ Contact SendGrid support Mimecast https://community.mimecast.com/ Uses third-party RBLs - contact specific RBL Fastmail https://www.fastmail.com/support/ Contact Fastmail support Zoho https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address Contact Zoho support ProtonMail https://proton.me/support/contact Contact Proton support Tutanota https://tutanota.com/support Contact Tutanota support Hushmail https://www.hushmail.com/support/ Contact Hushmail support Mailbox.org https://mailbox.org/en/support Contact Mailbox.org support Posteo https://posteo.de/en/site/contact Contact Posteo support DuckDuckGo Email https://duckduckgo.com/email/support Contact DuckDuckGo support Sonic.net https://www.sonic.com/support Contact Sonic support Telus https://www.telus.com/en/support Contact Telus support Vodafone Germany https://www.vodafone.de/hilfe/ Contact Vodafone support Xtra (Spark NZ) https://www.spark.co.nz/help/ Contact Spark NZ support UOL/BOL (Brazil) https://ajuda.uol.com.br/ Contact UOL support (Portuguese) Libero (Italy) https://aiuto.libero.it/ Contact Libero support (Italian) Telenet (Belgium) https://www2.telenet.be/en/support/ Contact Telenet support Facebook/WhatsApp https://www.facebook.com/business/help Contact Facebook business support LinkedIn https://www.linkedin.com/help/linkedin Contact LinkedIn support Groups.io https://groups.io/helpcenter Contact Groups.io support Earthlink/Vade Secure https://sendertool.vadesecure.com/en/ Vade Secure sender tool Cloudflare Email Security https://www.cloudflare.com/products/zero-trust/email-security/ Contact Cloudflare support Hornetsecurity/Expurgate https://www.hornetsecurity.com/ Contact Hornetsecurity support SpamExperts/Antispamcloud https://www.spamexperts.com/ Contact via hosting provider Mail2World https://www.mail2world.com/support/ Contact Mail2World support

Tip

Start with a low volume of high-quality emails to build a positive reputation before sending in larger volumes.

Important

If your domain is on a blacklist, each blacklist has its own removal process. Check their websites for instructions.

Tip

If you need additional help or find that we are false-positive listed as spam by a certain email service provider, then please contact us.

Question 23

What should I do if I receive spam emails?

Accepted Answer

You should unsubscribe from the emailing list (if possible) and block the sender.

Please do not report the message as spam, but instead forward it to our manually curated and privacy-focused abuse prevention system.

The email address to forward spam to is: abuse@forwardemail.net

Question 24

Why are my test emails sent to myself in Gmail showing as "suspicious"?

Accepted Answer

If you see this error message in Gmail when you send a test to yourself, or when a person you're emailing with your alias sees an email from you for the first time, then please do not worry – as this is a built-in safety feature of Gmail.

You can simply click "Looks safe". For example, if you were to send a test message using the send mail as feature (to someone else), then they will not see this message.

However if they do see this message, it's because they were normally used to seeing your emails come from john@gmail.com instead of john@customdomain.com (just an example). Gmail will alert the users just to make sure things are safe just in case, there is no workaround.

Question 25

Can I remove the via forwardemail dot net in Gmail?

Accepted Answer

This topic is related to a widely known issue in Gmail where extra info appears next to a sender's name.

As of May 2023 we support sending email with SMTP as an add-on for all paid users – which means that you can remove the via forwardemail dot net in Gmail.

Note that this FAQ topic is specific for those using the How to Send Mail As using Gmail feature.

Please see the section on Do you support sending email with SMTP for configuration instructions.

Question 26

Where are your servers located?

Accepted Answer

Tip

We may soon announce our EU datacenter location hosted under forwardemail.eu. Subscribe to the discussion at https://github.com/orgs/forwardemail/discussions/336 for updates.

Our servers are located primarily in Denver, Colorado – see https://forwardemail.net/ips for our complete list of IP addresses.

You can learn about our subprocessors on our GDPR, DPA, and Privacy pages.

Question 27

How do I export and backup my mailbox?

Accepted Answer

At anytime you can export your mailboxes as EML, Mbox, or encrypted SQLite formats.

Go to My Account Domains Aliases Download Backup and select your preferred export format type.

You will be emailed a link to download the export once it has finished.

Note that this export download link expires after 4 hours for security concerns.

If you need to inspect your exported EML or Mbox formats, then these open-soruce tools may be useful:

Name Format Platform GitHub URL MBox Viewer Mbox Windows https://github.com/eneam/mboxviewer mbox-web-viewer Mbox All platforms https://github.com/PHMRanger/mbox-web-viewer EmlReader EML Windows https://github.com/ayamadori/EmlReader Email viewer EML VSCode https://github.com/joelharkes/vscode_email_viewer eml-reader EML All platforms https://github.com/s0ph1e/eml-reader

Additionally if you need to convert a Mbox file to EML file, then you can use https://github.com/noelmartinon/mboxzilla.

Question 28

How do I import and migrate my existing mailbox?

Accepted Answer

You can easily import your email to Forward Email (e.g. using Thunderbird) with the instructions below:

Important: You must follow all of the following steps in order to import your existing email.

Export your email from your existing email provider:
Email Provider Export Format Export Instructions Gmail MBOX https://takeout.google.com/settings/takeout/custom/gmail Outlook PST
Tip: If you are using Outlook (PST export format), then you could simply follow the instructions under "Other" below. However we have provided links below to convert PST to MBOX/EML format based off your operating system:
Apple Mail MBOX https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974 Fastmail EML https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail Proton Mail MBOX/EML https://proton.me/support/export-emails-import-export-app Tutanota EML https://github.com/crepererum-oss/tatutanatata Gandi EML https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents Zoho EML https://www.zoho.com/mail/help/import-export-emails.html#alink2 Other Use Thunderbird Set up your existing email account in Thunderbird and then use the ImportExportTools NG plugin to export and import your email. You may also be able to simply copy/paste or drag/drop emails between one account to another.
Download, install, and open Thunderbird.
Create a new account using your alias' full email address (e.g. you@yourdomain.com) and your generated password. If you do not yet have a generated password, then refer to our setup instructions.
Download and install the ImportExportTools NG Thunderbird plugin.
Create a new local folder in Thunderbird, and then right click on it → select the ImportExportTools NG option → choose Import mbox file (for MBOX export format) – or – Import messages / Import all messages from a directory (for EML export format).
Drag/drop from the local folder to a new (or existing) IMAP folder in Thunderbird you wish to upload messages to in IMAP storage with our service. This will ensure they are backed up online with our SQLite encrypted storage.

Tip: If you are confused as to how to import into Thunderbird, then you can refer to official instructions at https://kb.mozillazine.org/Importing_folders and https://github.com/thunderbird/import-export-tools-ng/wiki.

Important: Once you have completed the export and import process, then you may also want to enable forwarding on your existing email account and set up an auto-responder to notify senders that you have a new email address (e.g. if you were previously using Gmail and are now using an email with your custom domain name).

Congratulations! You've successfully completed all steps.

Question 29

How do I use my own S3-compatible storage for backups?

Accepted Answer

Paid plan users can configure their own S3-compatible storage provider on a per-domain basis for IMAP/SQLite backups. This means your encrypted mailbox backups can be stored on your own infrastructure instead of (or in addition to) our default storage.

Supported providers include Amazon S3, Cloudflare R2, MinIO, Backblaze B2, DigitalOcean Spaces, and any other S3-compatible service.

Setup

Create a private bucket with your S3-compatible provider. The bucket must not be publicly accessible.
Create access credentials (access key ID and secret access key) with read/write permissions to the bucket.
Go to My Account Domains Advanced Settings Custom S3-Compatible Storage.
Check "Enable custom S3-compatible storage" and fill in your endpoint URL, access key ID, secret access key, region, and bucket name.
Click "Test Connection" to verify your credentials, bucket access, and write permissions.
Click "Save" to apply the settings.

How Backups Work

Backups are triggered automatically for every connected IMAP alias. The IMAP server checks all active connections once per hour and dispatches a backup for each connected alias. A Redis-based lock prevents duplicate backups from running within 30 minutes of each other, and the actual backup is skipped if a successful backup was already completed within the last 24 hours (unless the backup was explicitly requested by a user for download).

Backups can also be triggered manually by clicking "Download Backup" for any alias in the dashboard. Manual backups always run regardless of the 24-hour window.

The backup process works as follows:

The SQLite database is copied using VACUUM INTO, which creates a consistent snapshot without interrupting active connections and preserves the database encryption.
The backup file is verified by opening it to confirm encryption is still valid.
A SHA-256 hash is computed and compared against the existing backup in storage. If the hash matches, the upload is skipped (no changes since last backup).
The backup is uploaded to S3 using multipart upload via the @aws-sdk/lib-storage library.
A signed download URL (valid for 4 hours) is generated and emailed to the user.

Backup Formats

Three backup formats are supported:

Format Extension Description sqlite .sqlite Raw encrypted SQLite database snapshot (default for automatic IMAP backups) mbox .zip Password-protected ZIP containing mailbox in mbox format eml .zip Password-protected ZIP containing individual .eml files per message

Tip: If you have .sqlite backup files and want to convert them to .eml files locally, use our standalone CLI tool convert-sqlite-to-eml. It works on Windows, Linux, and macOS and does not require a network connection.

File Naming and Key Structure

When using custom S3 storage, backup files are stored with an ISO 8601 timestamp prefix so that each backup is preserved as a separate object. This gives you a full backup history in your own bucket.

The key format is:

{ISO 8601 timestamp}-{alias_id}.{extension}

For example:

2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite 2025-03-01T12:00:00.000Z-65a31c53c36b75ed685f3fda.zip 2025-03-02T12:00:00.000Z-65a31c53c36b75ed685f3fda.sqlite

The alias_id is the MongoDB ObjectId of the alias. You can find it in the alias settings page or via the API.

When using the default (system) storage, the key is flat (e.g. 65a31c53c36b75ed685f3fda.sqlite) and each backup overwrites the previous one.

Note: Since custom S3 storage retains all backup versions, storage usage will grow over time. We recommend configuring lifecycle rules on your bucket to automatically expire old backups (e.g. delete objects older than 30 or 90 days).

Data Ownership and Deletion Policy

Your custom S3 bucket is entirely under your control. We never delete or modify files in your custom S3 bucket — not when an alias is deleted, not when a domain is removed, and not during any cleanup operations. We only write new backup files to your bucket.

This means:

Alias deletion — When you delete an alias, we remove the backup from our default system storage only. Any backups previously written to your custom S3 bucket remain untouched.
Domain removal — Removing a domain does not affect files in your custom bucket.
Retention management — You are responsible for managing storage in your own bucket, including configuring lifecycle rules to expire old backups.

If you disable custom S3 storage or switch back to our default storage, existing files in your bucket are preserved. Future backups will simply be written to our default storage instead.

Security

Your access key ID and secret access key are encrypted at rest using AES-256-GCM before being stored in our database. They are only decrypted at runtime when performing backup operations.
We automatically validate that your bucket is not publicly accessible. If a public bucket is detected, the configuration will be rejected on save. If public access is detected at backup time, we fall back to our default storage and notify all domain administrators by email.
Credentials are validated on save via a HeadBucket call to ensure the bucket exists and credentials are correct. If validation fails, custom S3 storage is automatically disabled.
Each backup file includes a SHA-256 hash in its S3 metadata, which is used to detect unchanged databases and skip redundant uploads.

Error Notifications

If a backup fails when using your custom S3 storage (e.g. due to expired credentials or a connectivity issue), all domain administrators will be notified by email. These notifications are rate-limited to once every 6 hours to prevent duplicate alerts. If your bucket is detected as publicly accessible at backup time, administrators will be notified once daily.

API

You can also configure custom S3 storage via the API:

curl -X PUT https://api.forwardemail.net/v1/domains/sample.g0v.tw \ -u API_TOKEN: \ -d has_custom_s3=true \ -d s3_endpoint=https://s3.us-east-1.amazonaws.com \ -d s3_access_key_id=YOUR_ACCESS_KEY_ID \ -d s3_secret_access_key=YOUR_SECRET_ACCESS_KEY \ -d s3_region=us-east-1 \ -d s3_bucket=my-email-backups

To test the connection via the API:

curl -X POST https://api.forwardemail.net/v1/domains/sample.g0v.tw/test-s3-connection \ -u API_TOKEN:

Question 30

How do I convert SQLite backups to EML files?

Accepted Answer

If you download or store SQLite backups (either from our default storage or your own custom S3 bucket), you can convert them to standard .eml files using our standalone CLI tool convert-sqlite-to-eml. EML files can be opened with any email client (Thunderbird, Outlook, Apple Mail, etc.) or imported into other mail servers.

Installation

You can either download a pre-built binary (no Node.js required) or run it directly with Node.js:

Pre-built binaries — Download the latest release for your platform from GitHub Releases:

Platform Architecture File Linux x64 convert-sqlite-to-eml-linux-x64 Linux arm64 convert-sqlite-to-eml-linux-arm64 macOS Apple Silicon convert-sqlite-to-eml-darwin-arm64 Windows x64 convert-sqlite-to-eml-win-x64.exe

macOS users: After downloading, you may need to remove the quarantine attribute before running the binary:

sudo xattr -rd com.apple.quarantine ./convert-sqlite-to-eml-darwin-arm64

(Replace ./convert-sqlite-to-eml-darwin-arm64 with the actual path to the downloaded file.)

Linux users: After downloading, you may need to make the binary executable:

chmod +x ./convert-sqlite-to-eml-linux-x64

(Replace ./convert-sqlite-to-eml-linux-x64 with the actual path to the downloaded file.)

From source (requires Node.js >= 18):

cd tools/convert-sqlite-to-eml npm install node index.js

Usage

The tool supports both interactive and non-interactive modes.

Interactive mode — run without arguments and you will be prompted for all inputs:

./convert-sqlite-to-eml Forward Email - Convert SQLite Backup to EML ============================================= Path to SQLite backup file: /path/to/backup.sqlite IMAP/alias password: ******** Output ZIP path [/path/to/backup-2025-03-01T12-00-00-000Z.zip]:

Non-interactive mode — pass arguments via command-line flags for scripting and automation:

./convert-sqlite-to-eml \ --path /path/to/backup.sqlite \ --password "your-imap-password" \ --output /path/to/output.zip Flag Description --path Path to the encrypted SQLite backup file --password IMAP/alias password for decryption --output Output path for the ZIP file (default: auto-generated with ISO 8601 timestamp) --help Show help message

Output Format

The tool produces a password-protected ZIP archive (AES-256 encrypted) containing:

README.txt INBOX/ .eml .eml Sent/ .eml Drafts/ .eml

EML files are organized by mailbox folder. The ZIP password is the same as your IMAP/alias password. Each .eml file is a standard RFC 5322 email message with full headers, body text, and attachments reconstructed from the SQLite database.

How It Works

Question 31

Do you support self-hosting?

Accepted Answer

Yes, as of March 2025, we support a self-hosted option. Read the blog here. Checkout the self-hosted guide to get started. And for those interested in a more broken down step-by-step version see our Ubuntu or Debian based guides.

Question 32

How do I get started and set up email forwarding?

Accepted Answer

Estimated Setup Time: Less than 10 minutes

Getting Started: Carefully read and follow steps one through eight listed below. Be sure to replace the email address of user@gmail.com with the email address you want to forward emails to (if it isn't already accurate). Similarly be sure to replace sample.g0v.tw with your custom domain name (if it isn't already accurate).

If you have already registered your domain name somewhere, then you must completely skip this step and go to step two! Otherwise you can click here to register your domain name.
Do you remember where you registered your domain? Once you remember this, then follow the instructions below:
Important: You must open a new tab and sign in to your domain registrar. You can easily click on your "Registrar" below to automatically do this. In this new tab, you must navigate to the DNS management page at your registrar – and we have provided the step by step navigation steps below under the "Steps to Configure" column. Once you've navigated to this page in the new tab, you can return to this tab and proceed to step three below. Do not close the opened tab yet; you will need it for future steps!
Registrar Steps to Configure 1&1 Log in Domain Center (Select your domain) Edit DNS Settings Amazon Route 53 Log in Hosted Zones (Select your domain) Aplus.net Log in My Servers Domain Management DNS Manager Bluehost FOR ROCK: Log in Domains (Click the ▼ icon next to manage) DNS
FOR LEGACY: Log in Domains Zone editor (Select your domain) Cloudflare Log in DNS DNS Made Easy Log in DNS (Select your domain) DNSimple Log in (Select your domain) DNS Manage Digital Ocean Log in Networking Domains (Select your domain) More Manage Domain Domain.com Log in In card view, click manage on your domain In list view, click the gear icon DNS & Nameservers DNS Records Domains.com
Watch Log in (Select your domain) Manage (click gear icon) Click on DNS & Nameservers in left-hand menu DreamHost Log in Panel Domains Manage Domains DNS Dyn Log in Overview Manage Simple Editor Records Gandi Log in (Select your domain) Management Edit the zone GoDaddy
Watch Log in Manage My Domains (Select your domain) Manage DNS Google Domains
Watch Log in (Select your domain) Configure DNS Namecheap
Watch Log in Domain List (Select your domain) Manage Advanced DNS Netlify Log in (Select your domain) Setup Netlify DNS Network Solutions Log in Account Manager My Domain Names (Select your domain) Manage Change Where Domain Points Advanced DNS Shopify
Watch Log in Managed Domains (Select your domain) DNS Settings Squarespace Log in Home menu Settings Domains (Select your domain) Advanced settings Custom Records Vercel's Now Using "now" CLI now dns add [domain] '@' MX [record-value] [priority] Weebly Log in Domains page (Select your domain) DNS Wix Log in Domains page (Click icon) Select Manage DNS Records eNom Log in Domains My Domains Other
Important: Don't see your registrar name listed here? Simply search on the Internet for "how to change DNS records on $REGISTRAR" (replacing $REGISTRAR with the name of your registrar – e.g. "how to change DNS records on GoDaddy" if you're using GoDaddy).
Using your registrar's DNS management page (the other tab you have opened), set the following "MX" records:
Important: Note that there should be NO other MX records set. Both records shown below MUST exist. Be sure there are no typos; and you have both mx1 and mx2 spelled correctly. If there were already MX records that existed, please delete them completely. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary.
Name/Host/Alias TTL Type Priority Answer/Value "@", ".", or blank 3600 MX 0 mx1.forwardemail.net "@", ".", or blank 3600 MX 0 mx2.forwardemail.net
Using your registrar's DNS management page (the other tab you have opened), set the following TXT record(s):
Important: If you are on a paid plan, then you must completely skip this step and go to step five! If you are not on a paid plan, then your forwarded addresses will be publicly searchable – go to My Account Domains and upgrade your domain to a paid plan if desired. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to choose one or more combinations from Option A to Option F listed below.

Option A: If you are forwarding all emails from your domain, (e.g. "all@sample.g0v.tw", "hello@sample.g0v.tw", etc) to a specific address "user@gmail.com":
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=user@gmail.com
Tip: Make sure to replace the values above in the "Value" column with your own email address. The "TTL" value does not need to be 3600, it could be a lower or higher value if necessary. A lower time to live ("TTL") value will ensure any future changes made to your DNS records are propagated throughout the Internet quicker – think of this as how long it will be cached in-memory (in seconds). You can learn more about TTL on Wikipedia.

Option B: If you just need to forward a single email address (e.g. hello@sample.g0v.tw to user@gmail.com; this will also forward "hello+test@sample.g0v.tw" to "user+test@gmail.com" automatically):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com
Option C: If you are forwarding multiple emails, then you'll want to separate them with a comma:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com
Option D: You can have an infinite amount of forwarding emails setup – just make sure to not wrap over 255 characters in a single-line and start each line with "forward-email=". An example is provided below:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=hello:user@gmail.com,support:user@gmail.com "@", ".", or blank 3600 TXT forward-email=help:user@gmail.com,foo:user@gmail.com "@", ".", or blank 3600 TXT forward-email=orders:user@gmail.com,baz:user@gmail.com "@", ".", or blank 3600 TXT forward-email=info:user@gmail.com,beep:user@gmail.com "@", ".", or blank 3600 TXT forward-email=errors:user@gmail.com,boop:user@gmail.com
Option E: You can also specify a domain name in your TXT record to have global alias forwarding (e.g. "user@sample.g0v.tw" will get forwarded to "user@example.net"):
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=example.net
Option F: You can even use webhooks as a global or individual alias to forward emails to. See the example and full section on webhooks titled Do you support webhooks below.
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn
Option G: You can even use regular expressions ("regex") for matching aliases and for handling substitutions to forward emails to. See the examples and full section on regex titled Do you support regular expressions or regex below.

Need advanced regex with substitution? See the examples and full section on regex titled Do you support regular expressions or regex below.

Simple Example: If I want all emails that go to `linus@sample.g0v.tw` or `torvalds@sample.g0v.tw` to forward to `user@gmail.com`:
Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com
Important: Catch-all forwarding rules could also be described as "fall-through". This means that incoming emails which match at least one specific forwarding rule will be used instead of the catch-all. Specific rules include email addresses and regular expressions.

For example:
forward-email=hello:first@gmail.com,second@gmail.com
Emails sent to hello@sample.g0v.tw will **not** be forwarded to second@gmail.com (catch-all) with this configuration, and instead only be delivered to first@gmail.com.
Using your registrar's DNS management page (the other tab you have opened), additionally set the following TXT record: Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all
Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).
Verify your DNS records using our "Verify Records" tool available at My Account Domains Setup.
Send a test email to confirm it works. Note that it might take some time for your DNS records to propagate.
Tip: If you are not receiving test emails, or receive a test email that says "Be careful with this message", then see the answers for Why am I not receiving my test emails and Why are my test emails sent to myself in Gmail showing as "suspicious" respectively.
If you wish to "Send Mail As" from Gmail, then you will need to watch this video, or follow the steps under How to Send Mail As Using Gmail below.

Congratulations! You've successfully completed all steps.

Tip: Optional add-ons are listed below. Note that these add-ons are completely optional and may not be necessary. We wanted to at least provide you with additional information if necessary.

Optional Add-on: If you're using the How to Send Mail As using Gmail feature, then you may want to add yourself to an allowlist. See these instructions by Gmail on this topic.

Question 33

Can I use multiple MX exchanges and servers for advanced forwarding?

Accepted Answer

Yes, but you should only have one MX exchange listed in your DNS records.

Do not attempt to use "Priority" as a way to configure multiple MX exchanges.

Instead, you need to configure your existing MX exchange to forward mail for all non-matching aliases to our service's exchanges (mx1.forwardemail.net and/or mx2.forwardemail.net).

If you are using Google Workspace and you want to forward all non-matching aliases to our service, then see https://support.google.com/a/answer/6297084.

If you are using Microsoft 365 (Outlook) and you want to forward all non-matching aliases to our service, then see https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-to-route-mail and https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mail-flow-for-multiple-locations.

Question 34

How do I set up a vacation responder (out of office auto-responder)?

Accepted Answer

Go to My Account Domains Aliases and either create or edit the alias you would like to configure a vacation autoresponder for.

You have the ability to configure a start date, end date, subject, and message, and enable or disable it at anytime:

Plaintext subject and message are currently supported (we use striptags package internally to remove any HTML).
Subject is limited to 100 characters.
Message is limited to 1000 characters.
Setup requires Outbound SMTP configuration (e.g. you will need to setup DKIM, DMARC, and Return-Path DNS records).
- Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.
Vacation responder cannot be enabled on global vanity domain names (e.g. disposable addresses are not supported).
Vacation responder cannot be enabled for aliases with wildcard/catch-all (*) nor regular expressions.

Unlike mail systems such as postfix (e.g. that use the sieve vacation filter extension) – Forward Email automatically adds your DKIM signature, dummy-proofs connection issues when sending vacation responses (e.g. due to common SSL/TLS connection issues and legacy maintained servers), and even supports Open WKD and PGP encryption for vacation responses.

We only send once per allowlisted sender every 4 days (which is similar to Gmail's behavior).
- Our Redis cache uses a fingerprint of alias_id and sender, whereas alias_id is the alias MongoDB ID and sender is either the From address (if allowlisted) or root domain in the From address (if not allowlisted). For simplicity the expiry of this fingerprint in cache is set to 4 days.
- Our approach of using the root domain parsed in the From address for non-allowlisted senders prevents abuse from relatively unknown senders (e.g. malicious actors) from flooding vacation responder messages.
We only send when the MAIL FROM and/or From is not blank and does not contain (case-insensitive) a postmaster username (the portion before the @ in an email).
We don't send if the original message had any of the following headers (case-insensitive):
- Header of auto-submitted with a value not equal to no.
- Header of x-auto-response-suppress with a value of dr, autoreply, auto-reply, auto_reply, or all
- Header of list-id, list-subscribe, list-unsubscribe, list-help, list-post, list-owner, list-archive, x-autoreply, x-autorespond, or x-auto-respond (regardless of value).
- Header of precedence with a value of bulk, autoreply, auto-reply, auto_reply, or list.
We don't send if the MAIL FROM or From email address ends with +donotreply, -donotreply, +noreply, or -noreply.
We don't send if the From email address username portion was mdaemon and it had a case-insensitive header of X-MDDSN-Message.
We don't send if there was a case-insensitive content-type header of multipart/report.

Question 35

How do I set up SPF for Forward Email?

Accepted Answer

Using your registrar's DNS management page, set the following TXT record:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT v=spf1 a include:spf.forwardemail.net -all

Important: If you are using Gmail (e.g. Send Mail As) or G Suite, then you'll need to append include:_spf.google.com to the value above, for example:

v=spf1 a include:spf.forwardemail.net include:_spf.google.com -all

Important: If you are using Microsoft Outlook or Live.com, you'll need to append include:spf.protection.outlook.com to your SPF TXT record, for example:

v=spf1 a include:spf.forwardemail.net include:spf.protection.outlook.com -all

Tip: If you already have a similar line with "v=spf1", then you'll need to append include:spf.forwardemail.net right before any existing "include:host.com" records and before the "-all" in the same line, for example:

v=spf1 a include:spf.forwardemail.net include:host.com -all

Note that there is a difference between "-all" and "~all". The "-" indicates that the SPF check should FAIL if it does not match, and "~" indicates that the SPF check should SOFTFAIL. We recommend to use the "-all" approach to prevent domain forgery.

You may also need to include the SPF record for whichever host you are sending mail from (e.g. Outlook).

Question 36

How do I set up DKIM for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 37

How do I set up DMARC for Forward Email?

Accepted Answer

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions.

Question 38

How do I view DMARC Reports?

Accepted Answer

Forward Email provides a comprehensive DMARC Reports dashboard that allows you to monitor your email authentication performance across all your domains from a single interface.

What are DMARC Reports?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) reports are XML files sent by receiving mail servers that tell you how your emails are being authenticated. These reports help you understand:

How many emails are being sent from your domain
Whether those emails are passing SPF and DKIM authentication
What actions receiving servers are taking (accept, quarantine, or reject)
Which IP addresses are sending email on behalf of your domain

How to Access DMARC Reports

Go to My Account DMARC Reports to view your dashboard. You can also access domain-specific reports from My Account Domains by clicking the "DMARC" button next to any domain.

Dashboard Features

The DMARC Reports dashboard provides:

Summary Metrics: Total reports received, total messages analyzed, SPF alignment rate, DKIM alignment rate, and overall pass rate
Messages Over Time Chart: Visual trend of email volume and authentication rates over the past 30 days
Alignment Summary: Donut chart showing SPF vs DKIM alignment distribution
Message Disposition: Stacked bar chart showing how receiving servers handled your emails (accepted, quarantined, or rejected)
Recent Reports Table: Detailed list of individual DMARC reports with filtering and pagination
Domain Filtering: Filter reports by specific domain when managing multiple domains

Why This Matters

For organizations managing multiple domains (like enterprises, non-profits, or agencies), DMARC reports are essential for:

Identifying unauthorized senders: Detect if someone is spoofing your domain
Improving deliverability: Ensure your legitimate emails pass authentication
Monitoring email infrastructure: Track which services and IPs are sending on your behalf
Compliance: Maintain visibility into email authentication for security audits

Unlike other services that require separate DMARC monitoring tools, Forward Email includes DMARC report processing and visualization as part of your account at no additional cost.

Requirements

DMARC Reports are available for paid plans only
Your domain must have DMARC configured (see How do I set up DMARC for Forward Email)
Reports are automatically collected when receiving mail servers send them to your configured DMARC reporting address

Weekly Email Reports

Paid plan users automatically receive weekly DMARC report summaries via email. These emails include:

Summary statistics for all your domains
SPF and DKIM alignment rates
Message disposition breakdown (accepted, quarantined, rejected)
Top reporting organizations (Google, Microsoft, Yahoo, etc.)
IP addresses with alignment issues that may need attention
Direct links to your DMARC Reports dashboard

Weekly reports are sent automatically and cannot be disabled separately from other email notifications.

Question 39

How do I connect and configure my contacts?

Accepted Answer

To configure your contacts, use the CardDAV URL of: https://carddav.forwardemail.net (or simply carddav.forwardemail.net if your client allows it)

Question 40

How do I connect and configure my calendars?

Accepted Answer

To configure your calendar, use the CalDAV URL of: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Question 41

How do I add more calendars and manage existing calendars?

Accepted Answer

If you'd like to add additional calendars, then just add a new calendar URL of: https://caldav.forwardemail.net/dav/principals/calendar-name (be sure to replace calendar-name with your desired calendar name)

You can change a calendar's name and color after creation – just use your preferred calendar application (e.g. Apple Mail or Thunderbird).

Question 42

How do I connect and configure tasks and reminders?

Accepted Answer

To configure tasks and reminders, use the same CalDAV URL as calendars: https://caldav.forwardemail.net (or simply caldav.forwardemail.net if your client allows it)

Tasks and reminders will automatically be separated from calendar events into their own "Reminders" or "Tasks" calendar collection.

Setup instructions by platform:

macOS/iOS:

Add a new CalDAV account in System Preferences > Internet Accounts (or Settings > Accounts on iOS)
Use caldav.forwardemail.net as the server
Enter your Forward Email alias and generated password
After setup, you'll see both "Calendar" and "Reminders" collections
Use the Reminders app to create and manage tasks

Android with Tasks.org:

Install Tasks.org from Google Play Store or F-Droid
Go to Settings > Synchronization > Add Account > CalDAV
Enter server: https://caldav.forwardemail.net
Enter your Forward Email alias and generated password
Tasks.org will automatically discover your task calendars

Thunderbird:

Install the Lightning add-on if not already installed
Create a new calendar with type "CalDAV"
Use URL: https://caldav.forwardemail.net
Enter your Forward Email credentials
Both events and tasks will be available in the calendar interface

Question 43

Why can't I create tasks in macOS Reminders?

Accepted Answer

If you're having trouble creating tasks in macOS Reminders, try these troubleshooting steps:

Check account setup: Ensure your CalDAV account is properly configured with caldav.forwardemail.net
Verify separate calendars: You should see both "Calendar" and "Reminders" in your account. If you only see "Calendar", the task support may not be fully activated yet.
Refresh account: Try removing and re-adding your CalDAV account in System Preferences > Internet Accounts
Check server connectivity: Test that you can access https://caldav.forwardemail.net in your browser
Verify credentials: Ensure you're using the correct alias email and generated password (not your account password)
Force sync: In Reminders app, try creating a task and then manually refreshing the sync

Common issues:

"Reminders calendar not found": The server may need a moment to create the Reminders collection on first access
Tasks not syncing: Check that both devices are using the same CalDAV account credentials
Mixed content: Ensure tasks are being created in the "Reminders" calendar, not the general "Calendar"

Question 44

How do I set up Tasks.org on Android?

Accepted Answer

Tasks.org is a popular open-source task manager that works excellently with Forward Email's CalDAV task support.

Installation and Setup:

Install Tasks.org:
- From Google Play Store: Tasks.org
- From F-Droid: Tasks.org on F-Droid
Configure CalDAV sync:
- Open Tasks.org
- Go to ☰ Menu > Settings > Synchronization
- Tap "Add Account"
- Select "CalDAV"
Enter Forward Email settings:
- Server URL: https://caldav.forwardemail.net
- Username: Your Forward Email alias (e.g., you@yourdomain.com)
- Password: Your alias-specific generated password
- Tap "Add Account"
Account discovery:
- Tasks.org will automatically discover your task calendars
- You should see your "Reminders" collection appear
- Tap "Subscribe" to enable sync for the task calendar
Test sync:
- Create a test task in Tasks.org
- Check that it appears in other CalDAV clients (like macOS Reminders)
- Verify changes sync both ways

Features available:

✅ Task creation and editing
✅ Due dates and reminders
✅ Task completion and status
✅ Priority levels
✅ Subtasks and task hierarchy
✅ Tags and categories
✅ Two-way sync with other CalDAV clients

Troubleshooting:

If no task calendars appear, try manually refreshing in Tasks.org settings
Ensure you have at least one task created on the server (you can create one in macOS Reminders first)
Check network connectivity to caldav.forwardemail.net

Question 45

How do I set up SRS for Forward Email?

Accepted Answer

We automatically configure Sender Rewriting Scheme ("SRS") – you do not need to do this yourself.

Question 46

How do I set up MTA-STS for Forward Email?

Accepted Answer

Please refer to our section on MTA-STS for more insight.

Question 47

How do I add a profile picture to my email address?

Accepted Answer

If you're using Gmail, then follow these steps below:

Go to https://google.com and sign out of all email accounts
Click "Sign In" and on the drop-down click on "other account"
Select "Use another account"
Select "Create account"
Select "Use my current email address instead"
Enter your custom domain name email address
Retrieve the verification email sent to your email address
Enter the verification code from this email
Complete profile information for your new Google account
Agree to all Privacy and Terms of Use policies
Go to https://google.com and in the top right corner, click on your profile icon, and click on the "change" button
Upload a new photo or avatar for your account
Changes will take approximately 1-2 hours to propagate, but sometimes may be very quick.
Send a test email and the profile photo should appear.

Question 48

Do you support newsletters or mailing lists for marketing related email?

Accepted Answer

Yes, you can read more at https://forwardemail.net/guides/newsletter-with-listmonk.

Please note that in order to maintain IP reputation and ensure deliverability, Forward Email has a manual review process on a per-domain basis for newsletter approval. Email support@forwardemail.net or open a help request for approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Question 49

Do you support sending email with API?

Accepted Answer

Yes, as of May 2023 we support sending email with API as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Please view our section on Emails in our API documentation for options, examples, and more insight.

In order to send outbound email with our API, you must use your API token available under My Security.

Question 50

Do you support receiving email with IMAP?

Accepted Answer

Yes, as of October 16, 2023 we support receiving email over IMAP as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@sample.g0v.tw)

Tip: We recommend using Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for IMAP server name, enter imap.forwardemail.net
When prompted for IMAP server port, enter 993 (SSL/TLS) – see alternate IMAP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for IMAP server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 51

Do you support POP3?

Accepted Answer

Yes, as of December 4, 2023 we support POP3 as an add-on for all paid users. Please read our deep-dive article on how our encrypted SQLite mailbox storage feature works.

Important: Please ensure you have read our Terms and Privacy Policy – your use is considered acknowledgement and agreement.

Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@sample.g0v.tw)

Tip: We recommend using Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for POP3 server name, enter pop3.forwardemail.net
When prompted for POP3 server port, enter 995 (SSL/TLS) – see alternate POP3 ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for POP3 server password, paste the password from Generate Password in step 2 above
Save your settings – if you are having issues, then please contact us

Congratulations! You've successfully completed all steps.

Question 52

Do you support calendars (CalDAV)?

Accepted Answer

Yes, as of February 5, 2024 we have added this feature. Our server is caldav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@sample.g0v.tw Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use calendar support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 53

Do you support tasks and reminders (CalDAV VTODO)?

Accepted Answer

Yes, as of October 14, 2025 we have added CalDAV VTODO support for tasks and reminders. This uses the same server as our calendar support: caldav.forwardemail.net.

Our CalDAV server supports both calendar events (VEVENT) and tasks (VTODO) components using unified calendars. This means each calendar can contain both events and tasks, providing maximum flexibility and compatibility across all CalDAV clients.

How calendars and lists work:

Each calendar supports both events and tasks - You can add events, tasks, or both to any calendar
Apple Reminders lists - Each list you create in Apple Reminders becomes a separate calendar on the server
Multiple calendars - You can create as many calendars as you need, each with its own name, color, and organization
Cross-client sync - Tasks and events sync seamlessly between all compatible clients

Supported task clients:

Task features supported:

Task creation, editing, and deletion
Due dates and start dates
Task completion status (NEEDS-ACTION, IN-PROCESS, COMPLETED, CANCELLED)
Task priority levels
Recurring tasks
Task descriptions and notes
Multi-device synchronization
Subtasks with RELATED-TO property
Task reminders with VALARM

The login credentials are the same as for calendar support:

Login Example Description Username user@sample.g0v.tw Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

Important notes:

Each Reminders list is a separate calendar - When you create a new list in Apple Reminders, it creates a new calendar on the CalDAV server
Thunderbird users - You'll need to manually subscribe to each calendar/list you want to sync, or use the calendar home URL: https://caldav.forwardemail.net/dav/your-email@domain.com/
Apple users - Calendar discovery happens automatically, so all your calendars and lists will appear in Calendar.app and Reminders.app
Unified calendars - All calendars support both events and tasks, giving you flexibility in how you organize your data

Question 54

Do you support contacts (CardDAV)?

Accepted Answer

Yes, as of June 12, 2025 we have added this feature. Our server is carddav.forwardemail.net and is also monitored on our status page.

It supports both IPv4 and IPv6 and is available over port 443 (HTTPS).

Login Example Description Username user@sample.g0v.tw Email address of an alias that exists for the domain at My Account Domains. Password ************************ Alias-specific generated password.

In order to use contacts support, the user must be the email address of an alias that exists for the domain at My Account Domains – and the password must be an alias-specific generated password.

Question 55

Do you support sending email with SMTP?

Accepted Answer

Yes, as of May 2023 we support sending email with SMTP as an add-on for all paid users.

Important: Please ensure you have read our Terms, Privacy Policy, and Outbound SMTP Limits – your use is considered acknowledgement and agreement.

Important: If you are using Gmail, then refer to our Send Mail As with Gmail guide. If you are a developer, then refer to our email API docs.

Go to My Account Domains Settings Outbound SMTP Configuration and follow setup instructions
Create a new alias for your domain under My Account Domains Aliases (e.g. hello@sample.g0v.tw)
Click on Generate Password next to the newly created alias. Copy to your clipboard and securely store the generated password shown on the screen.
Using your preferred email application, add or configure an account with your newly created alias (e.g. hello@sample.g0v.tw)

Tip: We recommend using Thunderbird, Thunderbird Mobile, Apple Mail, or an open-source and privacy-focused alternative.
When prompted for SMTP server name, enter smtp.forwardemail.net
When prompted for SMTP server port, enter 465 (SSL/TLS) – see alternate SMTP ports if necessary

Tip: If you are using Thunderbird, then ensure "Connection security" is set to "SSL/TLS" and Authentication method is set to "Normal password".
When prompted for SMTP server password, paste the password from Generate Password in step 3 above
Save your settings and send your first test email – if you are having issues, then please contact us

Important: Please note that in order to maintain IP reputation and ensure deliverability, we have a manual review process on a per-domain basis for outbound SMTP approval. This typically takes less than 24 hours, with most requests being honored within 1-2 hours. In the near future we aim to make this process instant with additional spam controls and alerting. This process ensures that your emails reach the inbox and your messages don't get marked as spam.

Congratulations! You've successfully completed all steps.

Question 56

Do you support OpenPGP/MIME, end-to-end encryption ("E2EE"), and Web Key Directory ("WKD")?

Accepted Answer

Yes, we support OpenPGP, end-to-end encryption ("E2EE"), and the discovery of public keys using Web Key Directory ("WKD"). You can configure OpenPGP using keys.openpgp.org or self-host your own keys (refer to this gist for WKD server setup).

WKD lookups are cached for 1 hour to ensure timely email delivery → therefore if you add, change, or remove your WKD key, then please email us at support@forwardemail.net with your email address in order for us to manually purge the cache.
We support PGP encryption for messages that are forwarded via WKD lookup or using an uploaded PGP key on our interface.
Uploaded keys take prevalance as long as the PGP checkbox is enabled/checked.
Messages sent to webhooks are not currently encrypted with PGP.
If you have multiple aliases that match for a given forwarding address (e.g. regex/wildcard/exact combo) and if more than one of these contains an uploaded PGP key and has PGP checked → then we will send you an error alert email and will not encrypt the message with your uploaded PGP key. This is very rare and usually only applies to advanced users with complex alias rules.
PGP encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require PGP encryption on all mail then we suggest to use our IMAP service and configure your PGP key for your alias for inbound mail.

You can validate your Web Key Directory setup at https://wkd.chimbosonic.com/ (open-source) or https://www.webkeydirectory.com/ (proprietary).

Automatic Encryption: If you are using our outbound SMTP service and sending unencrypted messages, then we will automatically attempt to encrypt messages on a per-recipient basis using Web Key Directory ("WKD").

Important: You must follow all of the following steps in order to enable OpenPGP for your custom domain name.

Download and install your email client's recommended plugin below:
Email Client Platform Recommended Plugin Notes Thunderbird Desktop Configure OpenPGP in Thunderbird Thunderbird has built-in support for OpenPGP. Gmail Browser Mailvelope or FlowCrypt (proprietary license) Gmail does not support OpenPGP, however you can download the open-source plugin Mailvelope or FlowCrypt. Apple Mail macOS Free-GPGMail Apple Mail does not support OpenPGP, however you can download the open-source plugin Free-GPGMail. Apple Mail iOS PGPro or FlowCrypt (proprietary license) Apple Mail does not support OpenPGP, however you can download the open-source plugin PGPro or FlowCrypt. Outlook Windows gpg4win Outlook's desktop mail client does not support OpenPGP, however you can download the open-source plugin gpg4win. Outlook Browser Mailvelope or FlowCrypt (proprietary license) Outlook's web-based mail client does not support OpenPGP, however you can download the open-source plugin Mailvelope or FlowCrypt. Android Mobile OpenKeychain or FlowCrypt Android mail clients such as Thunderbird Mobile and FairEmail both support the open-source plugin OpenKeychain. You could alternatively use the open-source (proprietary licensing) plugin FlowCrypt. Google Chrome Browser Mailvelope or FlowCrypt (proprietary license) You can download the open-source browser extension Mailvelope or FlowCrypt. Mozilla Firefox Browser Mailvelope or FlowCrypt (proprietary license) You can download the open-source browser extension Mailvelope or FlowCrypt. Microsoft Edge Browser Mailvelope You can download the open-source browser extension Mailvelope. Brave Browser Mailvelope or FlowCrypt (proprietary license) You can download the open-source browser extension Mailvelope or FlowCrypt. Balsa Desktop Configure OpenPGP in Balsa Balsa has built-in support for OpenPGP. KMail Desktop Configure OpenPGP in KMail KMail has built-in support for OpenPGP. GNOME Evolution Desktop Configure OpenPGP in Evolution GNOME Evolution has built-in support for OpenPGP. Terminal Desktop Configure gpg in Terminal You can use the open-source gpg command line tool to generate a new key from command line.
Open the plugin, create your public key, and configure your email client to use it.
Upload your public key at https://keys.openpgp.org/upload.

Tip: You can visit https://keys.openpgp.org/manage to manage your key in the future.

Optional Add-on: If you are using our encrypted storage (IMAP/POP3) service and want all email stored in your (already encrypted) SQLite database to be encrypted with your public key, then go to My Account Domains Aliases (e.g. hello@sample.g0v.tw) Edit OpenPGP and upload your public key.
Add a new CNAME record to your domain name (e.g. sample.g0v.tw):
Name/Host/Alias TTL Type Answer/Value openpgpkey 3600 CNAME wkd.keys.openpgp.org
Tip: If your alias is using our vanity/disposable domains (e.g. hideaddress.net), then you can skip this step.

Congratulations! You've successfully completed all steps.

Question 57

Do you support S/MIME encryption?

Accepted Answer

Yes, we support S/MIME (Secure/Multipurpose Internet Mail Extensions) encryption as defined in RFC 8551. S/MIME provides end-to-end encryption using X.509 certificates, which is widely supported by enterprise email clients.

We support both RSA and ECC (Elliptic Curve Cryptography) certificates:

RSA certificates: 2048-bit minimum, 4096-bit recommended
ECC certificates: P-256, P-384, and P-521 NIST curves

To configure S/MIME encryption for your alias:

Obtain an S/MIME certificate from a trusted Certificate Authority (CA) or generate a self-signed certificate for testing.

Tip: Free S/MIME certificates are available from providers like Actalis or Actalis Free S/MIME.
Export your certificate in PEM format (the public certificate only, not the private key).
Go to My Account Domains Aliases (e.g. hello@sample.g0v.tw) Edit S/MIME and upload your public certificate.
Once configured, all incoming emails to your alias will be encrypted using your S/MIME certificate before being stored or forwarded.

Note: S/MIME encryption is applied to incoming messages that are not already encrypted. If a message is already encrypted with OpenPGP or S/MIME, it will not be re-encrypted.

Important: S/MIME encryption will not be applied to email forwarding through our MX servers if the sender had a DMARC policy of reject. If you require S/MIME encryption on all mail then we suggest to use our IMAP service and configure your S/MIME certificate for your alias for inbound mail.

The following email clients have built-in S/MIME support:

Email Client Platform Notes Apple Mail macOS Built-in S/MIME support. Go to Mail > Preferences > Accounts > your account > Trust to configure certificates. Apple Mail iOS Built-in S/MIME support. Go to Settings > Mail > Accounts > your account > Advanced > S/MIME to configure. Microsoft Outlook Windows Built-in S/MIME support. Go to File > Options > Trust Center > Trust Center Settings > Email Security to configure. Microsoft Outlook macOS Built-in S/MIME support. Go to Tools > Accounts > Advanced > Security to configure. Thunderbird Desktop Built-in S/MIME support. Go to Account Settings > End-To-End Encryption > S/MIME to configure. GNOME Evolution Desktop Built-in S/MIME support. Go to Edit > Preferences > Mail Accounts > your account > Security to configure. KMail Desktop Built-in S/MIME support. Go to Settings > Configure KMail > Identities > your identity > Cryptography to configure.

Congratulations! You've successfully configured S/MIME encryption for your alias.

Question 58

Do you support Sieve email filtering?

Accepted Answer

Yes! We support Sieve email filtering as defined in RFC 5228. Sieve is a powerful, standardized scripting language for server-side email filtering that allows you to automatically organize, filter, and respond to incoming messages.

Supported Sieve Extensions

We support a comprehensive set of Sieve extensions:

Extension RFC Description fileinto RFC 5228 File messages into specific folders reject / ereject RFC 5429 Reject messages with an error vacation RFC 5230 Automatic vacation/out-of-office replies vacation-seconds RFC 6131 Fine-grained vacation response intervals imap4flags RFC 5232 Set IMAP flags (\Seen, \Flagged, etc.) envelope RFC 5228 Test envelope sender/recipient body RFC 5173 Test message body content variables RFC 5229 Store and use variables in scripts relational RFC 5231 Relational comparisons (greater than, less than) comparator-i;ascii-numeric RFC 4790 Numeric comparisons copy RFC 3894 Copy messages while redirecting editheader RFC 5293 Add or delete message headers date RFC 5260 Test date/time values index RFC 5260 Access specific header occurrences regex draft-ietf-sieve-regex Regular expression matching enotify RFC 5435 Send notifications (e.g., mailto:) environment RFC 5183 Access environment information mailbox RFC 5490 Test mailbox existence, create mailboxes special-use RFC 8579 File into special-use mailboxes (\Junk, \Trash) duplicate RFC 7352 Detect duplicate messages ihave RFC 5463 Test for extension availability subaddress RFC 5233 Access user+detail address parts

Extensions Not Supported

The following extensions are not currently supported:

Extension Reason include Security risk (script injection) and requires global script storage mboxmetadata / servermetadata Requires IMAP METADATA extension support foreverypart / mime / extracttext / replace / enclose Complex MIME tree manipulation not yet implemented

Example Sieve Scripts

File newsletters into a folder:

require ["fileinto"]; if header :contains "List-Id" "newsletter" { fileinto "Newsletters"; }

Auto-reply when on vacation:

require ["vacation"]; vacation :days 7 :subject "Out of Office" "I am currently out of the office and will respond when I return.";

Mark messages from important senders:

require ["imap4flags"]; if address :is "from" "boss@sample.g0v.tw" { setflag "\Flagged"; }

Reject spam with specific subjects:

require ["reject"]; if header :contains "subject" ["lottery", "winner", "urgent transfer"] { reject "Message rejected due to spam content."; }

Managing Sieve Scripts

You can manage your Sieve scripts in several ways:

Note: Sieve filtering is applied to incoming messages before they are stored in your mailbox. Scripts are executed in order of priority, and the first matching action determines how the message is handled.

Security: For security, redirect actions are limited to 10 per script and 100 per day. Vacation responses are rate-limited to prevent abuse.

Question 59

Do you support MTA-STS?

Accepted Answer

Yes, as of March 2, 2023 we support MTA-STS. You can use this template if you wish to enable it on your domain.

Our configuration can be found publicly on GitHub at https://github.com/forwardemail/mta-sts.forwardemail.net.

Question 60

Do you support passkeys and WebAuthn?

Accepted Answer

Yes! As of December 13, 2023 we have added support for passkeys due to high demand.

Passkeys allow you to securely log in without requiring a password and two-factor authentication.

You can validate your identity with touch, facial recognition, device-based password, or PIN.

We allow you to manage up to 30 passkeys at once, so that you can log in with all of your devices with ease.

Learn more about passkeys at the following links:

Sign-in to your applications and websites with passkeys (Google)
Use passkeys to sign in to apps and websites on iPhone (Apple)
Wikipedia article on Passkeys

Question 61

Do you support email best practices?

Accepted Answer

Yes. We have built-in support for SPF, DKIM, DMARC, ARC, and SRS across all plans. We have also worked extensively with the original authors of these specifications and other email experts to ensure perfection and high deliverability.

Question 62

Do you support bounce webhooks?

Accepted Answer

Tip: Looking for documentation on email webhooks? See Do you support webhooks? for more insight.

Yes, as of August 14, 2024 we have added this feature. You can now go to My Account → Domains → Settings → Bounce Webhook URL and configure an http:// or https:// URL that we will send a POST request to whenever outbound SMTP emails bounce.

This is useful for you to manage and monitor your outbound SMTP – and can be used to maintain subscribers, opt-out, and detect whenever bounces occur.

Bounce webhook payloads are sent as a JSON with these properties:

email_id (String) - email ID that corresponds to an email in My Account → Emails (outbound SMTP)
list_id (String) - the List-ID header (case-insensitive) value, if any, from the original outbound email
list_unsubscribe (String) - the List-Unsubscribe header (case-insensitive) value, if any, from the original outbound email
feedback_id (String) - the Feedback-ID header (case-insensitive) value, if any, from the original outbound email
recipient (String) - the email address of the recipient that bounced or errored
message (String) - a detailed error message for the bounce
response (String) - the SMTP response message
response_code (Number) - the parsed SMTP response code
truth_source (String) - if the response code was from a trusted source, this value will be populated with the root domain name (e.g. google.com or yahoo.com)
bounce (Object) - an object containing the following properties that detail the bounce and rejection status
- action (String) - bounce action (e.g. "reject")
- message (String) - bounce reason (e.g. "Message Sender Blocked By Receiving Server")
- category (String) - bounce category (e.g. "block")
- code (Number) - bounce status code (e.g. 554)
- status (String) - bounce code from response message (e.g. 5.7.1)
- line (Number) - parsed line number, if any, from Zone-MTA bounce parse list (e.g. 526)
headers (Object) - key value pair of headers for the outbound email
bounced_at (String) - ISO 8601 formatted Date for when the bounce error occurred

For example:

{ "email_id": "66bcce793ef7b2a0928e14ba", "recipient": "example@gmail.com", "message": "The email account that you tried to reach is over quota.", "response": "552 5.2.2 The email account that you tried to reach is over quota.", "response_code": 552, "truth_source": "google.com", "bounce": { "action": "reject", "message": "Gmail Mailbox is full", "category": "capacity", "code": 552, "status": "5.2.2", "line": 300 }, "headers": {}, "bounced_at": "2024-08-24T01:50:02.828Z" }

Here are a few additional notes regarding bounce webhooks:

Question 63

Do you support webhooks?

Accepted Answer

Tip: Looking for documentation on bounce webhooks? See Do you support bounce webhooks? for more insight.

Yes, as of May 15, 2020 we have added this feature. You can simply add webhook(s) exactly like you would with any recipient! Please ensure that you have the "http" or "https" protocol prefixed in the webhook's URL.

Enhanced Privacy Protection: If you are on a paid plan (which features enhanced privacy protection), then please go to My Account Domains and click on "Aliases" next to your domain to configure your webhooks. If you would like to learn more about paid plans see our Pricing page. Otherwise you can continue to follow the instructions below.

If you are on the free plan, then simply add a new DNS TXT record as shown below:

For example, if I want all emails that go to alias@sample.g0v.tw to forward to a new request bin test endpoint:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=alias:https://requestbin.com/r/en8pfhdgcculn

Or perhaps you want all emails that go to sample.g0v.tw to forward to this endpoint:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=https://requestbin.com/r/en8pfhdgcculn

Here are additional notes regarding webhooks:

Tip: Curious what the webhook request looks like from forwarded emails? We've included an example below for you!

{ "attachments": [ { "type": "attachment", "content": { "type": "Buffer", "data": [ 104, 101, 108, 108, 111, 32, 119, 111, 114, 108, 100, 33 ] }, "contentType": "text/plain", "partId": "2", "release": null, "contentDisposition": "attachment", "filename": "text1.txt", "headers": {}, "checksum": "fc3ff98e8c6a0d3087d515c0473f8677", "size": 12 } ], "headers": "ARC-Seal: i=1; a=rsa-sha256; t=1653506802; cv=none; d=forwardemail.net; s=default; b=R6QJ0tGwwjg2VPxiAlVIKxsg3jEPtRGKPTIOdZNWuhWrbssttFdOYzRRqvacDyN5SLoyDhVye DUA/64IxANXdHVFlpR258Yp7WxLDv2gtJD5vNSKYmUJZOWk1TynmlqTYrp0Vuqg2xIUjIlPBWAJ PPNx4JvOLjJuWYynU2qIWz0= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=forwardemail.net; h=MIME-Version: Date: Message-ID: From: Content-Type; q=dns/txt; s=default; t=1653506802; bh=cEYDoyTy+Ub29XZt/zXR+sprfUE6BW0y5cHfah01PT4=; b=F/t56AAXr2Kv3G6VsbdT5OKDVJf2ulhwLiTM18Ra4tDPUKPSGSLKrWvxiXEg5NMWwdWnsOYrL r3YSm4uMxVMhHZbHm/sUu4QZq5/18hQsAkCv6fI9ifTjDwBrN5zpLOhPoZFFo+TyvHxiII3Xv3L UEzmUIIaJRX6tboQ160tino= ARC-Authentication-Results: i=1; mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1; Authentication-Results: mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) ", "headerLines": [ { "key": "arc-seal", "line": "ARC-Seal: i=1; a=rsa-sha256; t=1653506802; cv=none; d=forwardemail.net; s=default; b=R6QJ0tGwwjg2VPxiAlVIKxsg3jEPtRGKPTIOdZNWuhWrbssttFdOYzRRqvacDyN5SLoyDhVye DUA/64IxANXdHVFlpR258Yp7WxLDv2gtJD5vNSKYmUJZOWk1TynmlqTYrp0Vuqg2xIUjIlPBWAJ PPNx4JvOLjJuWYynU2qIWz0=" }, { "key": "arc-message-signature", "line": "ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=forwardemail.net; h=MIME-Version: Date: Message-ID: From: Content-Type; q=dns/txt; s=default; t=1653506802; bh=cEYDoyTy+Ub29XZt/zXR+sprfUE6BW0y5cHfah01PT4=; b=F/t56AAXr2Kv3G6VsbdT5OKDVJf2ulhwLiTM18Ra4tDPUKPSGSLKrWvxiXEg5NMWwdWnsOYrL r3YSm4uMxVMhHZbHm/sUu4QZq5/18hQsAkCv6fI9ifTjDwBrN5zpLOhPoZFFo+TyvHxiII3Xv3L UEzmUIIaJRX6tboQ160tino=" }, { "key": "arc-authentication-results", "line": "ARC-Authentication-Results: i=1; mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled)" }, { "key": "received-spf", "line": "Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1;" }, { "key": "authentication-results", "line": "Authentication-Results: mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled)" }, { "key": "x-forward-email-sender", "line": "X-Forward-Email-Sender: rfc822; test@example.net" }, { "key": "x-forward-email-session-id", "line": "X-Forward-Email-Session-ID: w2czxgznghn5ryyw" }, { "key": "x-forward-email-version", "line": "X-Forward-Email-Version: 9.0.0" }, { "key": "content-type", "line": "Content-Type: multipart/mixed; boundary="--_NmP-179a735428ca7575-Part_1"" }, { "key": "from", "line": "From: some " }, { "key": "message-id", "line": "Message-ID: <69ad5fc2-91cb-728f-ae5c-eeedc5f267b6@example.net>" }, { "key": "date", "line": "Date: Wed, 25 May 2022 19:26:41 +0000" }, { "key": "mime-version", "line": "MIME-Version: 1.0" } ], "html": "some random text", "text": "some random text", "textAsHtml": "

some random text

", "date": "2022-05-25T19:26:41.000Z", "from": { "value": [ { "address": "random@sample.g0v.tw", "name": "some" } ], "html": "some <random@sample.g0v.tw>", "text": "some " }, "messageId": "<69ad5fc2-91cb-728f-ae5c-eeedc5f267b6@example.net>", "raw": "ARC-Seal: i=1; a=rsa-sha256; t=1653506802; cv=none; d=forwardemail.net; s=default; b=R6QJ0tGwwjg2VPxiAlVIKxsg3jEPtRGKPTIOdZNWuhWrbssttFdOYzRRqvacDyN5SLoyDhVye DUA/64IxANXdHVFlpR258Yp7WxLDv2gtJD5vNSKYmUJZOWk1TynmlqTYrp0Vuqg2xIUjIlPBWAJ PPNx4JvOLjJuWYynU2qIWz0= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=forwardemail.net; h=MIME-Version: Date: Message-ID: From: Content-Type; q=dns/txt; s=default; t=1653506802; bh=cEYDoyTy+Ub29XZt/zXR+sprfUE6BW0y5cHfah01PT4=; b=F/t56AAXr2Kv3G6VsbdT5OKDVJf2ulhwLiTM18Ra4tDPUKPSGSLKrWvxiXEg5NMWwdWnsOYrL r3YSm4uMxVMhHZbHm/sUu4QZq5/18hQsAkCv6fI9ifTjDwBrN5zpLOhPoZFFo+TyvHxiII3Xv3L UEzmUIIaJRX6tboQ160tino= ARC-Authentication-Results: i=1; mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1; Authentication-Results: mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled) X-Forward-Email-Sender: rfc822; test@example.net X-Forward-Email-Session-ID: w2czxgznghn5ryyw X-Forward-Email-Version: 9.0.0 Content-Type: multipart/mixed; boundary="--_NmP-179a735428ca7575-Part_1" From: some Message-ID: <69ad5fc2-91cb-728f-ae5c-eeedc5f267b6@example.net> Date: Wed, 25 May 2022 19:26:41 +0000 MIME-Version: 1.0 ----_NmP-179a735428ca7575-Part_1 Content-Type: multipart/alternative; boundary="--_NmP-179a735428ca7575-Part_2" ----_NmP-179a735428ca7575-Part_2 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit some random text ----_NmP-179a735428ca7575-Part_2 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit some random text ----_NmP-179a735428ca7575-Part_2-- ----_NmP-179a735428ca7575-Part_1 Content-Type: text/plain; name=text1.txt Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=text1.txt aGVsbG8gd29ybGQh ----_NmP-179a735428ca7575-Part_1-- ", "dkim": { "headerFrom": [ "random@sample.g0v.tw" ], "envelopeFrom": "test@example.net", "results": [ { "status": { "result": "none", "comment": "message not signed" }, "info": "dkim=none (message not signed)" } ] }, "spf": { "domain": "example.net", "client-ip": "127.0.0.1", "helo": "user.oem.local", "envelope-from": "test@example.net", "status": { "result": "none", "comment": "mx1.forwardemail.net: example.net does not designate permitted sender hosts", "smtp": { "mailfrom": "test@example.net", "helo": "user.oem.local" } }, "header": "Received-SPF: none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) client-ip=127.0.0.1;", "info": "spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local", "lookups": { "limit": 50, "count": 1 } }, "arc": { "status": { "result": "none" }, "i": 0, "authResults": "mx1.forwardemail.net; dkim=none (message not signed); spf=none (mx1.forwardemail.net: example.net does not designate permitted sender hosts) smtp.mailfrom=test@example.net smtp.helo=user.oem.local; dmarc=none header.from=sample.g0v.tw; bimi=skipped (DMARC not enabled)" }, "dmarc": { "status": { "result": "none", "header": { "from": "sample.g0v.tw" } }, "domain": "sample.g0v.tw", "info": "dmarc=none header.from=sample.g0v.tw" }, "bimi": { "status": { "header": {}, "result": "skipped", "comment": "DMARC not enabled" }, "info": "bimi=skipped (DMARC not enabled)" }, "recipients": [ "webhook1@webhooks.net" ], "session": { "recipient": "webhook1@webhooks.net", "remoteAddress": "127.0.0.1", "remotePort": 65138, "clientHostname": "[127.0.0.1]", "hostNameAppearsAs": "user.oem.local", "sender": "test@example.net", "mta": "mx1.forwardemail.net", "arrivalDate": "2022-05-25T19:26:41.423Z", "arrivalTime": 1653506801423 } }

Question 64

Do you support regular expressions or regex?

Accepted Answer

Yes, as of September 27, 2021 we have added this feature. You can simply write regular expressions ("regex") for matching aliases and performing substitions.

Regular expression supported aliases are ones that start with a / and end with / and their recipients are email addresses or webhooks. The recipients can also include regex substitution support (e.g. $1, $2).

We support two regular expression flags including i and g. The case-insensitive flag of i is a permanent default and it is always enforced. The global flag of g can be added by you by affixing the ending / with /g.

Note that we also support our disabled alias feature for the recipient portion with our regex support.

Regular expressions are not supported on global vanity domains (as this could be a security vulnerability).

Enhanced Privacy Protection: If you are on a paid plan (which features enhanced privacy protection), then please go to My Account Domains and click on "Aliases" next to your domain to configure aliases, including those with regular expressions. If you would like to learn more about paid plans see our Pricing page.

Examples for Enhanced Privacy Protection

Alias Name Effect Test /^(linus|torvalds)$/ Emails to `linus@sample.g0v.tw` or `torvalds@sample.g0v.tw` (view test on RegExr) /^24highst(reet)$/ Emails to `24highst@sample.g0v.tw` or `24highstreet@sample.g0v.tw` (view test on RegExr)

Tip: To test these at RegExr, write the expression in the top box, and then type an example alias in the text box below. If it matches, it will turn blue.

Examples for the free plan

If you are on the free plan, then simply add a new DNS TXT record using one or more of the provided examples below:

Simple Example: If I want all emails that go to `linus@sample.g0v.tw` or `torvalds@sample.g0v.tw` to forward to `user@gmail.com`:

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:user@gmail.com

Firstname Lastname Substitution Example: Imagine all of your company email addresses are of the `firstname.lastname@sample.g0v.tw` pattern. If I want all emails that go to the pattern of `firstname.lastname@sample.g0v.tw` to forward to `firstname.lastname@company.com` with substitution support (view test on RegExr):

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^([A-Za-z]+)+\.([A-Za-z]+)+$/:$1.$2@company.com

Plus Symbol Filtering Substitution Example: If I want all emails that go to `info@sample.g0v.tw` or `support@sample.g0v.tw` to forward to `user+info@gmail.com` or `user+support@gmail.com` respectively (with substitution support) (view test on RegExr):

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(support|info)$/:user+$1@gmail.com

Webhook Querystring Substitution Example: Perhaps you want all emails that go to `sample.g0v.tw` to go to a webhook and have a dynamic querystring key of "to" with a value of the username portion of the email address (view test on RegExr):

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(.*?)$/:https://sample.g0v.tw/webhook?username=$1

Quiet reject example: If you want all emails that match a certain pattern to be disabled and quietly reject (appears to sender as if the message was sent successfully, but actually goes nowhere) with status code `250` (see Can I disable specific aliases), then simply use the same approach with a single exclamation mark "!". This indicates to the sender that the message was successfully delivered, but it actually went nowhere (e.g. blackhole or `/dev/null`).

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:!

Soft reject example: If you want all emails that match a certain pattern to be disabled and soft reject with status code `421` (see Can I disable specific aliases), then simply use the same approach with a double exclamation mark "!!". This indicates to the sender to retry their email, and emails to this alias will be retried for approximately 5 days and then reject permanently.

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:!!

Hard reject example: If you want all emails that match a certain pattern to be disabled and hard reject with status code `550` (see Can I disable specific aliases), then simply use the same approach with a triple exclamation mark "!!!". This indicates to the sender of a permanent error and emails will not retry, they will be rejected for this alias.

Name/Host/Alias TTL Type Answer/Value "@", ".", or blank 3600 TXT forward-email=/^(linus|torvalds)$/:!!!

Tip: Curious how to write a regular expression or need to test your replacement? You can go to the free regular expression testing website RegExr at https://regexr.com.

客户	案例研究
美国海军学院	📄 案例研究
Canonical	📄 案例研究
Netflix Games
Linux 基金会	📄 案例研究
PHP 基金会
Fox News Radio
迪士尼广告销售
jQuery	📄 案例研究
LineageOS
Ubuntu	📄 案例研究
Kubuntu	📄 案例研究
Lubuntu	📄 案例研究
剑桥大学	📄 案例研究
马里兰大学	📄 案例研究
华盛顿大学	📄 案例研究
塔夫茨大学	📄 案例研究
斯沃斯莫尔学院	📄 案例研究
南澳大利亚政府
多米尼加共和国政府
Fly.io
RCD 酒店
Isaac Z. Schlueter (npm)	📄 案例研究
David Heinemeier Hansson (Ruby on Rails)

类型	主机名	协议	端口
IMAP	`imap.forwardemail.net`	SSL/TLS 首选	`993` 和 `2993`
SMTP	`smtp.forwardemail.net`	SSL/TLS 推荐	SSL/TLS（推荐）使用 `465` 和 `2465`，STARTTLS 使用 `587`、`2587`、`2525` 和 `25`

格式	扩展名	描述
`sqlite`	`.sqlite`	原始加密的 SQLite 数据库快照（自动 IMAP 备份的默认格式）
`mbox`	`.zip`	包含 mbox 格式邮箱的密码保护 ZIP 文件
`eml`	`.zip`	包含每条邮件单独 `.eml` 文件的密码保护 ZIP 文件

参数	说明
`--path <path>`	加密的 SQLite 备份文件路径
`--password <pass>`	用于解密的 IMAP/别名密码
`--output <path>`	ZIP 文件输出路径（默认：自动生成，包含 ISO 8601 时间戳）
`--help`	显示帮助信息

注册商	配置步骤
1&1	登录域名中心（选择您的域名）编辑 DNS 设置
Amazon Route 53	登录托管区域（选择您的域名）
Aplus.net	登录我的服务器域名管理 DNS 管理器
Bluehost	ROCK 版本：登录域名（点击管理旁的 ▼ 图标） DNS 传统版本：登录域名区域编辑器（选择您的域名）
Cloudflare	登录 DNS
DNS Made Easy	登录 DNS （选择您的域名）
DNSimple	登录（选择您的域名） DNS 管理
Digital Ocean	登录网络域名（选择您的域名）更多管理域名
Domain.com	登录卡片视图中点击管理您的域名列表视图中点击齿轮图标 DNS 和名称服务器 DNS 记录
Domains.com 观看	登录（选择您的域名）管理（点击齿轮图标）点击左侧菜单中的 DNS & 名称服务器
DreamHost	登录面板域名管理域名 DNS
Dyn	登录概览管理简易编辑器记录
Gandi	登录（选择您的域名）管理编辑区域
GoDaddy 观看	登录管理我的域名（选择您的域名）管理 DNS
Google Domains 观看	登录（选择您的域名）配置 DNS
Namecheap 观看	登录域名列表（选择您的域名）管理高级 DNS
Netlify	登录（选择您的域名）设置 Netlify DNS
Network Solutions	登录账户管理我的域名（选择您的域名）管理更改域名指向高级 DNS
Shopify 观看	登录管理域名（选择您的域名） DNS 设置
Squarespace	登录首页菜单设置域名（选择您的域名）高级设置自定义记录
Vercel 的 Now	使用 "now" CLI `now dns add [domain] '@' MX [record-value] [priority]`
Weebly	登录域名页面（选择您的域名） DNS
Wix	登录域名页面（点击图标）选择管理 DNS 记录
eNom	登录域名我的域名
其他	重要：没有看到您的注册商名称？只需在网上搜索“如何更改 $REGISTRAR 的 DNS 记录”（将 $REGISTRAR 替换为您的注册商名称，例如如果您使用 GoDaddy，则搜索“如何更改 GoDaddy 的 DNS 记录”）。

工具名称	URL	类型
Cloudflare 域名分类反馈	https://radar.cloudflare.com/domains/feedback	分类
Spamhaus IP 和域名声誉检查器	https://check.spamhaus.org/	DNSBL
Cisco Talos IP 和域名声誉中心	https://talosintelligence.com/reputation_center	声誉
Barracuda IP 和域名声誉查询	https://www.barracudacentral.org/lookups/lookup-reputation	DNSBL
MX Toolbox 黑名单检查	https://mxtoolbox.com/blacklists.aspx	黑名单
Google 邮件管理员工具	https://www.gmail.com/postmaster/	声誉
Yahoo 发送者中心	https://senders.yahooinc.com/	声誉
MultiRBL.valli.org 黑名单检查	https://multirbl.valli.org/lookup/	DNSBL
Sender Score	https://senderscore.org/act/blocklist-remover/	声誉
Invaluement	https://www.invaluement.com/lookup/	DNSBL
SURBL	https://www.surbl.org/	DNSBL
SpamCop	https://www.spamcop.net/bl.shtml	DNSBL
UCEPROTECT 的等级 1、2 和 3	https://www.uceprotect.net/en/rblcheck.php	DNSBL
UCEPROTECT 的 backscatterer.org	https://www.backscatterer.org/	反向散射保护
UCEPROTECT 的 whitelisted.org	https://www.whitelisted.org/（需付费）	DNSWL

提供商	移除表单 / 联系方式	备注
Google/Gmail	https://support.google.com/mail/contact/bulk_send_new	大批量发送者联系表单
Microsoft (Outlook/Office 365/Hotmail)	https://sender.office.com	Office 365 IP 移除门户
Yahoo/AOL/Verizon	https://senders.yahooinc.com/	Yahoo 发送者中心
Apple/iCloud	https://ipcheck.proofpoint.com/	Apple 使用 Proofpoint 进行 IP 声誉管理
Proofpoint	https://ipcheck.proofpoint.com/	Proofpoint IP 检查和移除
Barracuda Networks	https://www.barracudacentral.org/lookups/lookup-reputation	Barracuda 声誉查询和移除
Cloudmark	https://csi.cloudmark.com/en/reset/	Cloudmark CSI 重置请求
GoDaddy/SecureServer	https://unblock.secureserver.net	GoDaddy IP 解封请求表单
Comcast/Xfinity	https://spa.xfinity.com/report	Comcast IP 移除请求
Charter/Spectrum	https://www.spectrum.net/support/internet/understanding-email-error-codes	联系 Spectrum 支持进行移除
AT&T	`abuse_rbl@abuse-att.net`	移除请求邮箱
Cox Communications	`unblock.request@cox.net`	移除请求邮箱
CenturyLink/Lumen	`abuse@centurylink.com`	使用 Cloudfilter
Windstream	`abuse@windstream.net`	移除请求邮箱
t-online.de（德国）	`tobr@rx.t-online.de`	移除请求邮箱
Orange France	https://postmaster.orange.fr/	使用联系表单或邮箱 `abuse@orange.fr`
GMX	https://postmaster.gmx.net/en/contact	GMX 邮件管理员联系表单
Mail.ru	https://postmaster.mail.ru/	Mail.ru 邮件管理员门户
Yandex	https://postmaster.yandex.ru/	Yandex 邮件管理员门户
QQ 邮箱（腾讯）	https://open.mail.qq.com/	QQ 邮箱白名单申请（中文）
网易（163.com）	https://mail.163.com/postmaster/	网易邮件管理员门户
阿里巴巴/阿里云/万网	https://www.alibabacloud.com/help/en/alibaba-mail/	通过阿里云控制台联系
Amazon SES	https://docs.aws.amazon.com/ses/latest/dg/faqs-dnsbls.html	AWS SES 控制台 > 黑名单移除
SendGrid	https://support.sendgrid.com/	联系 SendGrid 支持
Mimecast	https://community.mimecast.com/	使用第三方 RBL - 联系具体 RBL
Fastmail	https://www.fastmail.com/support/	联系 Fastmail 支持
Zoho	https://help.zoho.com/portal/en/kb/campaigns/faqs/campaign-review/articles/how-do-i-delist-my-ip-address	联系 Zoho 支持
ProtonMail	https://proton.me/support/contact	联系 Proton 支持
Tutanota	https://tutanota.com/support	联系 Tutanota 支持
Hushmail	https://www.hushmail.com/support/	联系 Hushmail 支持
Mailbox.org	https://mailbox.org/en/support	联系 Mailbox.org 支持
Posteo	https://posteo.de/en/site/contact	联系 Posteo 支持
DuckDuckGo 邮箱	https://duckduckgo.com/email/support	联系 DuckDuckGo 支持
Sonic.net	https://www.sonic.com/support	联系 Sonic 支持
Telus	https://www.telus.com/en/support	联系 Telus 支持
Vodafone 德国	https://www.vodafone.de/hilfe/	联系 Vodafone 支持
Xtra (Spark NZ)	https://www.spark.co.nz/help/	联系 Spark NZ 支持
UOL/BOL（巴西）	https://ajuda.uol.com.br/	联系 UOL 支持（葡萄牙语）
Libero（意大利）	https://aiuto.libero.it/	联系 Libero 支持（意大利语）
Telenet（比利时）	https://www2.telenet.be/en/support/	联系 Telenet 支持
Facebook/WhatsApp	https://www.facebook.com/business/help	联系 Facebook 商业支持
LinkedIn	https://www.linkedin.com/help/linkedin	联系 LinkedIn 支持
Groups.io	https://groups.io/helpcenter	联系 Groups.io 支持
Earthlink/Vade Secure	https://sendertool.vadesecure.com/en/	Vade Secure 发送者工具
Cloudflare 邮件安全	https://www.cloudflare.com/products/zero-trust/email-security/	联系 Cloudflare 支持
Hornetsecurity/Expurgate	https://www.hornetsecurity.com/	联系 Hornetsecurity 支持
SpamExperts/Antispamcloud	https://www.spamexperts.com/	通过托管服务提供商联系
Mail2World	https://www.mail2world.com/support/	联系 Mail2World 支持

名称	格式	平台	GitHub 链接
MBox Viewer	Mbox	Windows	https://github.com/eneam/mboxviewer
mbox-web-viewer	Mbox	所有平台	https://github.com/PHMRanger/mbox-web-viewer
EmlReader	EML	Windows	https://github.com/ayamadori/EmlReader
Email viewer	EML	VSCode	https://github.com/joelharkes/vscode_email_viewer
eml-reader	EML	所有平台	https://github.com/s0ph1e/eml-reader
此外，如果您需要将 Mbox 文件转换为 EML 文件，可以使用 https://github.com/noelmartinon/mboxzilla。

电子邮件提供商	导出格式	导出说明
Gmail	MBOX	https://takeout.google.com/settings/takeout/custom/gmail
Outlook	PST	提示：如果您使用的是 Outlook (PST 导出格式)，那么您可以简单地按照下面“其他”部分的说明操作。不过，我们根据您的操作系统提供了将 PST 转换为 MBOX/EML 格式的链接： Windows 版 Zinkuba (GitHub) Windows cygwin 版 readpst – （例如 `readpst -u -o $OUT_DIR $IN_DIR`，将 `$OUT_DIR` 和 `$IN_DIR` 替换为输出目录和输入目录路径）。 Ubuntu/Linux 版 readpst – （例如 `sudo apt-get install readpst`，然后 `readpst -u -o $OUT_DIR $IN_DIR`，将 `$OUT_DIR` 和 `$IN_DIR` 替换为输出目录和输入目录路径）。 macOS 版 readpst（通过 brew） – （例如 `brew install libpst`，然后 `readpst -u -o $OUT_DIR $IN_DIR`，将 `$OUT_DIR` 和 `$IN_DIR` 替换为输出目录和输入目录路径）。 Windows 版 PST Converter（GitHub）
Apple Mail	MBOX	https://support.apple.com/guide/mail/import-or-export-mailboxes-mlhlp1030/mac#apd37a3190755974
Fastmail	EML	https://www.fastmail.help/hc/en-us/articles/360060590573-Download-all-your-data#downloadmail
Proton Mail	MBOX/EML	https://proton.me/support/export-emails-import-export-app
Tutanota	EML	https://github.com/crepererum-oss/tatutanatata
Gandi	EML	https://docs.gandi.net/en/gandimail/common_operations/backup_email.html#contents
Zoho	EML	https://www.zoho.com/mail/help/import-export-emails.html#alink2
其他	使用 Thunderbird	在 Thunderbird 中设置您现有的电子邮件账户，然后使用 ImportExportTools NG 插件导出和导入您的电子邮件。您也可以尝试简单地复制/粘贴或拖放电子邮件在账户之间。

平台	架构	文件
Linux	x64	`convert-sqlite-to-eml-linux-x64`
Linux	arm64	`convert-sqlite-to-eml-linux-arm64`
macOS	Apple Silicon	`convert-sqlite-to-eml-darwin-arm64`
Windows	x64	`convert-sqlite-to-eml-win-x64.exe`

名称/主机/别名	TTL	类型	优先级	答案/值
"@", ".", 或空白	3600	MX	0	`mx1.forwardemail.net`
"@", ".", 或空白	3600	MX	0	`mx2.forwardemail.net`

名称/主机/别名	TTL	类型	答案/值
"@", ".", 或空白	3600	TXT	`forward-email=hello:user@gmail.com,support:user@gmail.com`
"@", ".", 或空白	3600	TXT	`forward-email=help:user@gmail.com,foo:user@gmail.com`
"@", ".", 或空白	3600	TXT	`forward-email=orders:user@gmail.com,baz:user@gmail.com`
"@", ".", 或空白	3600	TXT	`forward-email=info:user@gmail.com,beep:user@gmail.com`
"@", ".", 或空白	3600	TXT	`forward-email=errors:user@gmail.com,boop:user@gmail.com`

登录名	示例	说明
用户名	`user@sample.g0v.tw`	在我的账户域名中存在的别名的电子邮件地址。
密码	`************************`	别名专用生成的密码。

登录名	示例	说明
用户名	`user@sample.g0v.tw`	域名下存在的别名的电子邮件地址，管理位置在我的账户域名。
密码	`************************`	别名专用生成密码。

邮件客户端	平台	推荐插件	备注
Thunderbird	桌面	在 Thunderbird 中配置 OpenPGP	Thunderbird 内置支持 OpenPGP。
Gmail	浏览器	Mailvelope 或 FlowCrypt（专有许可）	Gmail 不支持 OpenPGP，但您可以下载开源插件 Mailvelope 或 FlowCrypt。
Apple Mail	macOS	Free-GPGMail	Apple Mail 不支持 OpenPGP，但您可以下载开源插件 Free-GPGMail。
Apple Mail	iOS	PGPro 或 FlowCrypt（专有许可）	Apple Mail 不支持 OpenPGP，但您可以下载开源插件 PGPro 或 FlowCrypt。
Outlook	Windows	gpg4win	Outlook 桌面邮件客户端不支持 OpenPGP，但您可以下载开源插件 gpg4win。
Outlook	浏览器	Mailvelope 或 FlowCrypt（专有许可）	Outlook 网页邮件客户端不支持 OpenPGP，但您可以下载开源插件 Mailvelope 或 FlowCrypt。
Android	移动端	OpenKeychain 或 FlowCrypt	Android 邮件客户端如 Thunderbird Mobile 和 FairEmail 都支持开源插件 OpenKeychain。您也可以使用开源（专有许可）插件 FlowCrypt。
Google Chrome	浏览器	Mailvelope 或 FlowCrypt（专有许可）	您可以下载开源浏览器扩展 Mailvelope 或 FlowCrypt。
Mozilla Firefox	浏览器	Mailvelope 或 FlowCrypt（专有许可）	您可以下载开源浏览器扩展 Mailvelope 或 FlowCrypt。
Microsoft Edge	浏览器	Mailvelope	您可以下载开源浏览器扩展 Mailvelope。
Brave	浏览器	Mailvelope 或 FlowCrypt（专有许可）	您可以下载开源浏览器扩展 Mailvelope 或 FlowCrypt。
Balsa	桌面	在 Balsa 中配置 OpenPGP	Balsa 内置支持 OpenPGP。
KMail	桌面	在 KMail 中配置 OpenPGP	KMail 内置支持 OpenPGP。
GNOME Evolution	桌面	在 Evolution 中配置 OpenPGP	GNOME Evolution 内置支持 OpenPGP。
Terminal	桌面	在终端中配置 gpg	您可以使用开源的 gpg 命令行工具从命令行生成新密钥。

邮件客户端	平台	说明
Apple Mail	macOS	内置 S/MIME 支持。前往邮件 > 偏好设置 > 账户 > 您的账户 > 信任来配置证书。
Apple Mail	iOS	内置 S/MIME 支持。前往设置 > 邮件 > 账户 > 您的账户 > 高级 > S/MIME 来配置。
Microsoft Outlook	Windows	内置 S/MIME 支持。前往文件 > 选项 > 信任中心 > 信任中心设置 > 邮件安全来配置。
Microsoft Outlook	macOS	内置 S/MIME 支持。前往工具 > 账户 > 高级 > 安全来配置。
Thunderbird	桌面	内置 S/MIME 支持。前往账户设置 > 端到端加密 > S/MIME 来配置。
GNOME Evolution	桌面	内置 S/MIME 支持。前往编辑 > 偏好设置 > 邮件账户 > 您的账户 > 安全来配置。
KMail	桌面	内置 S/MIME 支持。前往设置 > 配置 KMail > 身份 > 您的身份 > 加密来配置。

扩展	RFC	描述
`fileinto`	RFC 5228	将邮件归档到指定文件夹
`reject` / `ereject`	RFC 5429	拒绝邮件并返回错误
`vacation`	RFC 5230	自动假期/离开回复
`vacation-seconds`	RFC 6131	精细控制假期回复间隔
`imap4flags`	RFC 5232	设置 IMAP 标记（\Seen、\Flagged 等）
`envelope`	RFC 5228	测试信封发件人/收件人
`body`	RFC 5173	测试邮件正文内容
`variables`	RFC 5229	在脚本中存储和使用变量
`relational`	RFC 5231	关系比较（大于、小于）
`comparator-i;ascii-numeric`	RFC 4790	数值比较
`copy`	RFC 3894	重定向时复制邮件
`editheader`	RFC 5293	添加或删除邮件头
`date`	RFC 5260	测试日期/时间值
`index`	RFC 5260	访问特定邮件头出现次数
`regex`	draft-ietf-sieve-regex	正则表达式匹配
`enotify`	RFC 5435	发送通知（例如 mailto:）
`environment`	RFC 5183	访问环境信息
`mailbox`	RFC 5490	测试邮箱存在性，创建邮箱
`special-use`	RFC 8579	归档到特殊用途邮箱（\Junk、\Trash）
`duplicate`	RFC 7352	检测重复邮件
`ihave`	RFC 5463	测试扩展可用性
`subaddress`	RFC 5233	访问 user+detail 地址部分

扩展	原因
`include`	安全风险（脚本注入）且需要全局脚本存储
`mboxmetadata` / `servermetadata`	需要 IMAP METADATA 扩展支持
`foreverypart` / `mime` / `extracttext` / `replace` / `enclose`	复杂的 MIME 树操作尚未实现

别名名称	效果	测试
`/^(linus\|torvalds)$/`	邮件发送到 `linus@sample.g0v.tw` 或 `torvalds@sample.g0v.tw`	(在 RegExr 上查看测试)
`/^24highst(reet)$/`	邮件发送到 `24highst@sample.g0v.tw` 或 `24highstreet@sample.g0v.tw`	(在 RegExr 上查看测试)

协议	主机名	端口	IPv4	IPv6	备注
`SSL/TLS` 推荐	`smtp.forwardemail.net`	`465`, `2465`	✅	✅	现代 TLS 1.2+（推荐）
`TLS` (STARTTLS)	`smtp.forwardemail.net`	`587`, `2587`, `2525`, `25`	✅	✅	支持（优先使用 SSL/TLS 端口 `465`）
`SSL/TLS` 仅限旧版	`smtp.forwardemail.net`	`2455`	✅	✅	⚠️ 仅限旧设备使用 TLS 1.0
`TLS` (STARTTLS) 仅限旧版	`smtp.forwardemail.net`	`2555`	✅	✅	⚠️ 仅限旧设备使用 TLS 1.0
登录	示例	描述
--------	--------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
用户名	`user@sample.g0v.tw`	存在于我的账户域名下域的别名的电子邮件地址。
密码	`************************`	别名

协议	主机名	端口	IPv4	IPv6
`SSL/TLS` 首选	`pop3.forwardemail.net`	`995`, `2995`	✅	✅
登录	示例	描述
--------	--------------------------	-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
用户名	`user@sample.g0v.tw`	在我的账户域名中存在的别名的电子邮件地址。
密码	`************************`	别名专用生成密码。

类型	名称/主机	目标/值
CNAME	`autoconfig`	`autoconfig.forwardemail.net`
CNAME	`autodiscover`	`autodiscover.forwardemail.net`

类型	名称/主机	优先级	权重	端口	目标/值	用途
SRV	`_imaps._tcp`	0	1	993	`imap.forwardemail.net`	IMAP 通过 SSL/TLS（首选）
SRV	`_imap._tcp`	0	0	0	`.`	禁用明文 IMAP
SRV	`_submissions._tcp`	0	1	465	`smtp.forwardemail.net`	SMTP 提交（SSL/TLS，推荐）
SRV	`_submission._tcp`	5	1	587	`smtp.forwardemail.net`	SMTP 提交（STARTTLS）
SRV	`_pop3s._tcp`	10	1	995	`pop3.forwardemail.net`	POP3 通过 SSL/TLS
SRV	`_pop3._tcp`	0	0	0	`.`	禁用明文 POP3
SRV	`_caldavs._tcp`	0	1	443	`caldav.forwardemail.net`	CalDAV 通过 TLS（日历）
SRV	`_caldav._tcp`	0	0	0	`.`	禁用明文 CalDAV
SRV	`_carddavs._tcp`	0	1	443	`carddav.forwardemail.net`	CardDAV 通过 TLS（联系人）
SRV	`_carddav._tcp`	0	0	0	`.`	禁用明文 CardDAV

客户端	邮件	CalDAV/CardDAV
Thunderbird	`autoconfig` CNAME 或 SRV 记录	`autoconfig` XML 或 SRV 记录（RFC 6764）
Apple Mail (macOS)	SRV 记录（RFC 6186）	SRV 记录（RFC 6764）
Apple Mail (iOS)	SRV 记录（RFC 6186）	SRV 记录（RFC 6764）
Microsoft Outlook	`autodiscover` CNAME 或 `_autodiscover._tcp` SRV	不支持
GNOME (Evolution)	SRV 记录（RFC 6186）	SRV 记录（RFC 6764）
KDE (KMail)	SRV 记录（RFC 6186）	SRV 记录（RFC 6764）
eM Client	`autoconfig` 或 `autodiscover`	SRV 记录（RFC 6764）

提供商	数据隐私框架认证	GDPR 合规页面
Cloudflare	✅ 是	https://www.cloudflare.com/trust-hub/gdpr/
DataPacket	❌ 否	https://www.datapacket.com/privacy-policy
DigitalOcean	❌ 否	https://www.digitalocean.com/legal/gdpr
GitHub	✅ 是	https://docs.github.com/en/site-policy/privacy-policies/github-data-protection-agreement
Vultr	❌ 否	https://www.vultr.com/legal/eea-gdpr-privacy/

名称/主机/别名	TTL	类型	答案/值
"@", ".", 或空白	3600	TXT	`forward-email=hello:user+a@gmail.com`
"@", ".", 或空白	3600	TXT	`forward-email=hello:user+b@gmail.com`

名称/主机/别名	TTL	类型	答案/值
"@", ".", 或空白	3600	TXT	`forward-email=user+a@gmail.com`
@, ".", 或空白	3600	TXT	`forward-email=user+b@gmail.com`

常见问题

快速开始

介绍

什么是 Forward Email

谁在使用 Forward Email

Forward Email 的历史是什么

该服务有多快

邮件客户端

Thunderbird

Microsoft Outlook

Apple Mail

eM Client

移动设备

Sendmail SMTP 中继配置

配置

测试

Exim4 SMTP 中继配置

配置

测试

msmtp SMTP 客户端配置

配置

测试

命令行邮件客户端

Windows 邮件配置

Postfix SMTP 中继配置

安装

配置

测试

如何使用 Gmail 发送邮件

什么是使用 Gmail 发送邮件的传统免费指南

高级 Gmail 路由配置

高级 Outlook 路由配置

故障排除

为什么我收不到测试邮件

如何配置我的邮件客户端以使用 Forward Email

为什么我的邮件会进入垃圾邮件和垃圾箱，以及我如何检查我的域名声誉

声誉和黑名单检查工具

按提供商分类的 IP 移除请求表单

如果我收到垃圾邮件，我应该怎么办

为什么我发给自己在 Gmail 的测试邮件显示为“可疑”

我能否在 Gmail 中去掉 via forwardemail dot net

数据管理

您的服务器位于哪里

如何导出和备份我的邮箱

如何导入和迁移我现有的邮箱

我如何使用自己的兼容 S3 存储进行备份

设置

备份工作原理

备份格式

文件命名和键结构

数据所有权和删除政策

安全性

错误通知

API

如何将 SQLite 备份转换为 EML 文件

安装

使用方法

输出格式

工作原理

是否支持自托管

邮件配置

如何开始并设置邮件转发

我可以为高级转发使用多个 MX 交换机和服务器吗

如何设置假期自动回复（离开办公室自动回复）

如何为 Forward Email 设置 SPF

我如何为 Forward Email 设置 DKIM

我如何为 Forward Email 设置 DMARC

我如何查看 DMARC 报告

如何连接和配置我的联系人

如何连接和配置我的日历

如何添加更多日历及管理现有日历

如何连接和配置任务和提醒

为什么我无法在 macOS 提醒中创建任务

如何在 Android 上设置 Tasks.org

如何为 Forward Email 设置 SRS

如何为 Forward Email 设置 MTA-STS

如何为我的邮箱地址添加头像

高级功能

您支持用于营销相关邮件的新闻通讯或邮件列表吗

您支持通过 API 发送邮件吗