How to Set Up Cold Email Infrastructure That Lands in the Inbox
Complete technical guide to SPF, DKIM, DMARC, domain warm-up, and sending limits for cold email in 2026.
You can write the perfect cold email. Personalized. Short. Relevant. Signal-based. But if your infrastructure is broken, your prospect never sees it. It lands in spam. Or it bounces. Or Google throttles your entire sending domain.
Proper email infrastructure can improve response rates by up to 30.5%. That's not a messaging improvement. That's a plumbing improvement. You're not sending better emails. You're making sure the good emails you already send actually arrive.
In 2026, email authentication isn't optional. Google, Yahoo, and Microsoft enforce SPF, DKIM, and DMARC. AI-powered spam filters detect template patterns. High-volume senders with low engagement rates get throttled automatically.
This guide covers the complete cold email infrastructure setup: authentication, domains, warmup, sending limits, and monitoring.
Step 1: Set Up Email Authentication
Authentication tells receiving servers that you're allowed to send email from your domain. Without it, your emails look suspicious.
SPF (Sender Policy Framework)
What it does: Lists which servers are authorized to send email from your domain.
How to set it up:
- Go to your domain's DNS settings
- Add a TXT record:
v=spf1 include:[your-email-provider] ~all - If using multiple sending services, include each one
- Limit to 10 DNS lookups (SPF limitation)
DKIM (DomainKeys Identified Mail)
What it does: Adds a cryptographic signature to your emails, verifying they weren't altered in transit.
How to set it up:
- Generate a DKIM key pair in your email provider's settings
- Add the public key as a TXT record in your DNS
- Your email provider signs outgoing messages with the private key
- Receiving servers verify using the public key
DMARC (Domain-based Message Authentication)
What it does: Tells receiving servers what to do with emails that fail SPF or DKIM checks.
How to set it up:
- Add a TXT record at
_dmarc.yourdomain.com - Start with:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com - Monitor reports for 2-4 weeks
- Tighten to
p=quarantinethenp=rejectonce you're confident
Start with p=none to monitor without affecting delivery. Move to stricter policies once you've verified everything works.
Step 2: Use Dedicated Sending Domains
Never send cold outreach from your primary domain. If your sending domain gets flagged or blacklisted, your primary domain stays clean.
Domain Setup
- Register a secondary domain:
outreach-yourcompany.comormail-yourcompany.com - Set up all three authentication records (SPF, DKIM, DMARC) on the new domain
- Create a simple landing page on the domain (even a redirect to your main site) so it doesn't look like a throwaway domain
- Create mailboxes: Individual inboxes for each SDR.
sarah@outreach-yourcompany.com, notnoreply@...
How Many Domains?
Rule of thumb: one sending domain per 2-3 SDRs. Each domain sends a maximum of 30-50 emails per day. If you have 6 SDRs, use 2-3 sending domains.
Multiple domains spread your sending reputation risk. If one domain gets flagged, the others keep sending.
Step 3: Warm Up Your Domains
A fresh domain with zero sending history that suddenly fires off 200 emails is an instant red flag. Email providers assume it's spam.
Warmup Process
Week 1: Send 5-10 emails per day. To real people (colleagues, friends, existing contacts). Get replies. Open the emails. Click links. This builds positive engagement signals.
Week 2: Increase to 15-25 per day. Mix in a few cold prospects alongside warm sends.
Week 3: Increase to 25-40 per day. Shift toward mostly cold prospects.
Week 4+: Settle at your target volume (30-50 per domain per day). Never increase by more than 20% per week.
Automated Warmup Tools
Tools like Instantly, Warmbox, and Lemwarm automate the warmup process by sending and receiving emails between a network of real inboxes. They simulate engagement (opens, replies, removes from spam) to build your sender reputation faster.
Use automated warmup for the first 2-4 weeks. Continue running it at low volume alongside your cold outreach to maintain positive engagement signals.
Step 4: Set Sending Limits
Per-Domain Limits
- Maximum: 50 emails per domain per day for cold outreach
- Safe zone: 30-40 per domain per day
- Never exceed: 100 per domain per day (even with good reputation)
Per-Mailbox Limits
- Maximum: 30 emails per mailbox per day
- Safe zone: 20-25 per mailbox per day
- Spacing: 3-5 minutes between sends (don't batch-send)
Why Lower Is Better
Campaigns targeting fewer than 50 recipients average 5.8% reply rates vs 2.1% for 1,000+. Smaller sends to targeted lists outperform high-volume blasts. Infrastructure limits aren't just about deliverability. They force the targeting discipline that produces better results.
Step 5: Maintain List Hygiene
Bounce Rate Management
Keep bounce rates below 1%. Every bounce damages your sender reputation.
- Verify emails before sending: Use NeverBounce, ZeroBounce, or similar tools
- Remove catch-all domains carefully: These accept any email but don't guarantee delivery
- Clean your list monthly: Remove invalid, inactive, and unsubscribed contacts
Engagement Monitoring
Track these deliverability metrics:
| Metric | Healthy | Warning | Critical |
|---|---|---|---|
| Bounce rate | < 1% | 1-3% | > 3% |
| Spam complaints | < 0.1% | 0.1-0.3% | > 0.3% |
| Open rate | > 40% | 20-40% | < 20% |
| Unsubscribe rate | < 0.5% | 0.5-1% | > 1% |
If any metric enters the warning zone, pause sending, investigate, and fix before continuing.
Step 6: Monitor and Maintain
Weekly Health Checks
- Check sender reputation: Use Google Postmaster Tools, Microsoft SNDS, or MXToolbox
- Review bounce reports: Identify patterns (specific domains, specific providers)
- Monitor open rates: Sudden drops indicate deliverability problems
- Test inbox placement: Send test emails to Gmail, Outlook, and Yahoo accounts
When Things Go Wrong
Sudden open rate drop: Check if you've been blacklisted (MXToolbox blacklist check). Verify SPF/DKIM/DMARC records haven't changed. Check if your email provider had a deliverability issue.
High bounce rates: Your list has bad data. Pause sending. Re-verify all email addresses. Remove invalid contacts.
Spam complaints spike: Your messaging is too aggressive or your targeting is too broad. Review recent campaigns for common complaint patterns.
Emma, an SDR manager, noticed open rates dropping from 48% to 19% over two weeks. She paused all sending and ran diagnostics. The cause: one of their sending domains had been blacklisted after a new rep sent 150 emails in one day (3x the safe limit). She removed the domain from sending, warmed up a replacement, and open rates recovered to 45% within 10 days. The lesson: infrastructure limits aren't suggestions.
The Cold Email Infrastructure Checklist
Before sending a single cold email, verify:
- SPF record configured on sending domain
- DKIM configured and verified
- DMARC set to at least
p=nonewith monitoring - Dedicated sending domain(s) registered (not primary domain)
- Individual mailboxes created per SDR
- Domain warmup completed (2-4 weeks minimum)
- Sending limits set (30-50 per domain per day)
- Email verification tool connected
- Bounce monitoring active
- Sender reputation monitoring set up
This isn't glamorous work. It's the plumbing that makes everything else possible. The best messaging in the world doesn't matter if your emails land in spam.
Infrastructure sorted? Now add signal-based personalization. Start your free Cleed trial and generate outreach that reaches the inbox AND gets replies. No credit card required.