Send application email without changing your existing MX records
Add Postscale API or SMTP sending while keeping your mailbox provider. Review a DNS record diff, verify authentication and test incoming mail.
TL;DR
Choose application sending to add Postscale without moving incoming mail. Keep the existing MX records, approve only the sending and bounce-routing records, then test outbound delivery and the existing inbox separately.
What you will learn
- Keep your mailbox provider while adding API or SMTP sending
- Review the exact DNS changes and distinguish the bounce hostname from receiving MX
- Verify both application delivery and existing mailbox reception
You can add an application email provider while keeping your existing inbox. Choose application sending in Postscale. MX records select where incoming mail goes; your application's API or SMTP configuration selects how it sends.
Keep the two paths separate
Incoming mail → existing MX → current mailbox provider
Application → Postscale API / SMTP → recipient
Delivery failure → dedicated return-path host → Postscale
For example, your team can keep support@example.com in its existing mailbox
while Postscale sends receipts from receipts@example.com. Set Reply-To to a
working, monitored address when receipts should accept human replies. A bounce
hostname handles delivery failures, not those conversations.
If you want personal forwarding instead, first compare forwarding, SMTP and mailbox hosting.
Before setup
You need a verified Postscale administrator account, room for the domain on your plan, and control of its DNS. Automatic approval additionally requires an active primary DNScale zone and permission to edit it. The services have separate accounts and billing; check plans and limits before proceeding.
Record your current MX answers and export the relevant zone records. Inventory every sender before editing SPF; keep the mailbox provider's authorization and DKIM selectors. Check your sending approval status: DNS verification does not remove account review or volume limits.
dig example.com MX +noall +answer
dig example.com TXT +noall +answer
dig _dmarc.example.com TXT +noall +answer
Replace example.com with your own domain. Also query its assigned authoritative
nameservers to distinguish published records from a resolver's cached answers.
Prepare application sending
- Open automatic setup with DNScale and choose application sending. You can also start from the DNScale zone's Set up email with Postscale action.
- Confirm the exact domain. A sending subdomain is also an option, but it has its own records and sender addresses.
- Prepare the domain, DKIM and return path, then choose Connect with DNScale when available. Postscale saves the setup for resumption.
- Review the DNS changes in DNScale. An application-sending preview should not replace the domain's receiving MX. Approve only a plan matching your intent.
- Return to Postscale and verify the records.
For DNS hosted elsewhere, or when automatic setup is unavailable, follow manual domain setup and select Send email only. Copy the generated record names and values instead of placeholders from an article.
What a sending-only record diff looks like
This example assumes an existing mailbox provider. Names ending in .example
are placeholders; the dashboard supplies the real selectors and values.
| Record | Before | After application setup |
|---|---|---|
example.com MX | Existing mailbox provider's set | Unchanged |
example.com SPF TXT | v=spf1 include:old.example -all | v=spf1 include:old.example include:_spf.postscale.io -all |
_postscale.example.com TXT | Absent | Generated ownership token |
| New DKIM selector TXT | Absent | Generated Postscale public key |
| Existing provider's DKIM | Existing selector and key | Unchanged |
_dmarc.example.com TXT | Existing policy | Preserved |
ps-bounces.example.com CNAME | Absent | bounces.postscale.io |
| Website A/AAAA and other TXT | Existing records | Unchanged |
When no DMARC policy exists, setup can propose v=DMARC1; p=none for monitoring.
Review it separately from an existing enforcement policy. A compatible SPF merge
preserves the old sender and final all mechanism; multiple SPF policies or a
redirect need manual review. Expanded includes must still fit SPF's lookup
budget. See authentication setup.
The return-path CNAME occupies a separate hostname. Do not create it at the root of your domain or replace a hostname already serving something else. A conflict is a reason to review the plan, not delete unrelated records.
Prove both mail paths still work
Use controlled addresses and a small number of uniquely titled messages:
- Compare authoritative and recursive MX answers with your saved inventory. The receiving record set should match.
- Send a new message from an external account to an existing company address. Confirm it arrives in the original mailbox, then test its usual reply path.
- Send through your application using Postscale API or
SMTP. A
ps_test_key simulates sending; real delivery needs an appropriateps_live_key and an eligible sending account. - Inspect the received message's From, Reply-To and authentication results. Confirm the expected domain signs it and DMARC passes. Record the actual result; an API success or SMTP acceptance alone does not prove inbox receipt.
- Reply to the application message and confirm the monitored reply address receives it. Test delayed-bounce handling separately if your application uses it.
When setup needs attention
| Symptom | Next check |
|---|---|
| Automatic connection unavailable | Use the domain's manual records; confirm zone eligibility |
| Approval link expired | Resume the saved Postscale setup and reconnect for a fresh link |
| SPF or return-path conflict | Inventory the existing service; resolve the conflict before approving |
| DNS still pending | Compare authoritative answers, then allow older resolver caches to expire |
| DNS ready but sending blocked | Check account approval, sender domain, credentials and limits |
| Existing incoming mail changed | Stop the cutover and compare MX with the saved set; restore only unintended changes |
Keep the old sending configuration until the replacement passes your checks. Switching the application's sender back is separate from restoring DNS, and DNS restoration is not immediate for cached answers. DNScale's record approval walkthrough explains the DNS side of the handoff.
Set up application sending →Frequently asked questions
- Do I need to change MX to send with Postscale?
- No. Application sending leaves your existing MX records unchanged. Add the ownership, authentication and return-path records shown for your domain.
- Can Postscale receive replies without moving my main mailbox?
- Replies to an address on your existing mailbox domain follow that domain's MX. For application inbound processing, configure a separate receiving subdomain.