Back to Blog
Cold Email10 min read

How to Set Up Cold Email Infrastructure That Lands in the Inbox

Complete technical guide to SPF, DKIM, DMARC, domain warm-up, and sending limits for cold email in 2026.

You can write the perfect cold email. Personalized. Short. Relevant. Signal-based. But if your infrastructure is broken, your prospect never sees it. It lands in spam. Or it bounces. Or Google throttles your entire sending domain.

Proper email infrastructure can improve response rates by up to 30.5%. That's not a messaging improvement. That's a plumbing improvement. You're not sending better emails. You're making sure the good emails you already send actually arrive.

In 2026, email authentication isn't optional. Google, Yahoo, and Microsoft enforce SPF, DKIM, and DMARC. AI-powered spam filters detect template patterns. High-volume senders with low engagement rates get throttled automatically.

This guide covers the complete cold email infrastructure setup: authentication, domains, warmup, sending limits, and monitoring.

Step 1: Set Up Email Authentication

Authentication tells receiving servers that you're allowed to send email from your domain. Without it, your emails look suspicious.

SPF (Sender Policy Framework)

What it does: Lists which servers are authorized to send email from your domain.

How to set it up:

  1. Go to your domain's DNS settings
  2. Add a TXT record: v=spf1 include:[your-email-provider] ~all
  3. If using multiple sending services, include each one
  4. Limit to 10 DNS lookups (SPF limitation)

DKIM (DomainKeys Identified Mail)

What it does: Adds a cryptographic signature to your emails, verifying they weren't altered in transit.

How to set it up:

  1. Generate a DKIM key pair in your email provider's settings
  2. Add the public key as a TXT record in your DNS
  3. Your email provider signs outgoing messages with the private key
  4. Receiving servers verify using the public key

DMARC (Domain-based Message Authentication)

What it does: Tells receiving servers what to do with emails that fail SPF or DKIM checks.

How to set it up:

  1. Add a TXT record at _dmarc.yourdomain.com
  2. Start with: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
  3. Monitor reports for 2-4 weeks
  4. Tighten to p=quarantine then p=reject once you're confident

Start with p=none to monitor without affecting delivery. Move to stricter policies once you've verified everything works.

Step 2: Use Dedicated Sending Domains

Never send cold outreach from your primary domain. If your sending domain gets flagged or blacklisted, your primary domain stays clean.

Domain Setup

  1. Register a secondary domain: outreach-yourcompany.com or mail-yourcompany.com
  2. Set up all three authentication records (SPF, DKIM, DMARC) on the new domain
  3. Create a simple landing page on the domain (even a redirect to your main site) so it doesn't look like a throwaway domain
  4. Create mailboxes: Individual inboxes for each SDR. sarah@outreach-yourcompany.com, not noreply@...

How Many Domains?

Rule of thumb: one sending domain per 2-3 SDRs. Each domain sends a maximum of 30-50 emails per day. If you have 6 SDRs, use 2-3 sending domains.

Multiple domains spread your sending reputation risk. If one domain gets flagged, the others keep sending.

Step 3: Warm Up Your Domains

A fresh domain with zero sending history that suddenly fires off 200 emails is an instant red flag. Email providers assume it's spam.

Warmup Process

Week 1: Send 5-10 emails per day. To real people (colleagues, friends, existing contacts). Get replies. Open the emails. Click links. This builds positive engagement signals.

Week 2: Increase to 15-25 per day. Mix in a few cold prospects alongside warm sends.

Week 3: Increase to 25-40 per day. Shift toward mostly cold prospects.

Week 4+: Settle at your target volume (30-50 per domain per day). Never increase by more than 20% per week.

Automated Warmup Tools

Tools like Instantly, Warmbox, and Lemwarm automate the warmup process by sending and receiving emails between a network of real inboxes. They simulate engagement (opens, replies, removes from spam) to build your sender reputation faster.

Use automated warmup for the first 2-4 weeks. Continue running it at low volume alongside your cold outreach to maintain positive engagement signals.

Step 4: Set Sending Limits

Per-Domain Limits

  • Maximum: 50 emails per domain per day for cold outreach
  • Safe zone: 30-40 per domain per day
  • Never exceed: 100 per domain per day (even with good reputation)

Per-Mailbox Limits

  • Maximum: 30 emails per mailbox per day
  • Safe zone: 20-25 per mailbox per day
  • Spacing: 3-5 minutes between sends (don't batch-send)

Why Lower Is Better

Campaigns targeting fewer than 50 recipients average 5.8% reply rates vs 2.1% for 1,000+. Smaller sends to targeted lists outperform high-volume blasts. Infrastructure limits aren't just about deliverability. They force the targeting discipline that produces better results.

Step 5: Maintain List Hygiene

Bounce Rate Management

Keep bounce rates below 1%. Every bounce damages your sender reputation.

  • Verify emails before sending: Use NeverBounce, ZeroBounce, or similar tools
  • Remove catch-all domains carefully: These accept any email but don't guarantee delivery
  • Clean your list monthly: Remove invalid, inactive, and unsubscribed contacts

Engagement Monitoring

Track these deliverability metrics:

MetricHealthyWarningCritical
Bounce rate< 1%1-3%> 3%
Spam complaints< 0.1%0.1-0.3%> 0.3%
Open rate> 40%20-40%< 20%
Unsubscribe rate< 0.5%0.5-1%> 1%

If any metric enters the warning zone, pause sending, investigate, and fix before continuing.

Step 6: Monitor and Maintain

Weekly Health Checks

  1. Check sender reputation: Use Google Postmaster Tools, Microsoft SNDS, or MXToolbox
  2. Review bounce reports: Identify patterns (specific domains, specific providers)
  3. Monitor open rates: Sudden drops indicate deliverability problems
  4. Test inbox placement: Send test emails to Gmail, Outlook, and Yahoo accounts

When Things Go Wrong

Sudden open rate drop: Check if you've been blacklisted (MXToolbox blacklist check). Verify SPF/DKIM/DMARC records haven't changed. Check if your email provider had a deliverability issue.

High bounce rates: Your list has bad data. Pause sending. Re-verify all email addresses. Remove invalid contacts.

Spam complaints spike: Your messaging is too aggressive or your targeting is too broad. Review recent campaigns for common complaint patterns.

Emma, an SDR manager, noticed open rates dropping from 48% to 19% over two weeks. She paused all sending and ran diagnostics. The cause: one of their sending domains had been blacklisted after a new rep sent 150 emails in one day (3x the safe limit). She removed the domain from sending, warmed up a replacement, and open rates recovered to 45% within 10 days. The lesson: infrastructure limits aren't suggestions.

The Cold Email Infrastructure Checklist

Before sending a single cold email, verify:

  • SPF record configured on sending domain
  • DKIM configured and verified
  • DMARC set to at least p=none with monitoring
  • Dedicated sending domain(s) registered (not primary domain)
  • Individual mailboxes created per SDR
  • Domain warmup completed (2-4 weeks minimum)
  • Sending limits set (30-50 per domain per day)
  • Email verification tool connected
  • Bounce monitoring active
  • Sender reputation monitoring set up

This isn't glamorous work. It's the plumbing that makes everything else possible. The best messaging in the world doesn't matter if your emails land in spam.

Infrastructure sorted? Now add signal-based personalization. Start your free Cleed trial and generate outreach that reaches the inbox AND gets replies. No credit card required.

Ready to find prospects showing real buying signals?

Start your free 7-day trial.

Start Free Trial