guide · updated 2026-10-05
Cold email infrastructure setup in 2026
Cold email infrastructure is three layers stacked on top of each other: the domains your prospects see, the mailboxes that send, and the IP addresses the mail leaves from. Each layer has its own reputation, and since Google and Yahoo started enforcing their sender requirements in February 2024, and Microsoft followed for Outlook.com in May 2025, each layer also has rules it has to meet before a message is even considered for the inbox. This guide walks through how many of each you need, how to warm them up, how much each mailbox should send, and the authentication every receiver now checks.
Disclosure: adbtd sells dedicated email infrastructure. The setup below works on any provider; where we mention adbtd we say so.
Domains vs mailboxes vs IPs
People new to outbound often treat “an email account” as one thing. To a receiving mail server it is at least three, and they are judged separately.
Domains: the name your reputation is attached to
Gmail, Outlook and Yahoo increasingly score mail by the domain in the From address and the domains that sign it. That is why the first rule of cold email is to never send it from your main company domain: if a campaign goes badly, you do not want the domain that carries your invoices, password resets and customer support to inherit the damage. Instead, register a handful of secondary domains that are obviously yours (getacme.com, acmehq.com, tryacme.io), point their websites at your main site, and send outbound from those.
Every sending domain needs its own SPF, DKIM and DMARC records, an MX record so replies and bounces have somewhere to go, and ideally MTA-STS and TLS-RPT. Domains are cheap; losing your primary domain’s reputation is not.
Mailboxes: the identities that send
A mailbox is a real address with a real person’s name on it, like lena@getacme.com. Mailboxes are how you split volume: instead of one address sending 1,000 messages a day, which looks like a bulk sender and is treated as one, thirty-odd addresses each send a volume that looks like a busy salesperson. The usual practice is two or three mailboxes per domain, so that one domain’s trouble only affects a few senders.
IPs: where the mail physically leaves from
Every message is delivered from an IP address, and receivers track the reputation of that address too. With Google Workspace or Microsoft 365, your mail leaves from the provider’s large shared ranges, which you neither control nor see. With a dedicated IP, the address is yours alone: no other sender’s spam complaints can drag you down, but you also start with no history and have to build it. The IP also needs a valid PTR (reverse DNS) record that matches its forward DNS, which both Google and Yahoo now require of every sender.
How the numbers fit together
Work backwards from the number of new prospects you want to reach per day. Here is the arithmetic for 1,000 cold emails a day:
| layer | rule of thumb | result |
|---|---|---|
| Mailboxes | ~30 cold emails per mailbox per day | 1,000 ÷ 30 = 34 mailboxes |
| Domains | 3 mailboxes per domain | 34 ÷ 3 = 12 domains |
| IPs | split domains over a few IPs so one listing doesn’t stop everything | 2 dedicated IPs |
On adbtd that setup costs $105.66 a month (34 mailboxes + 2 IPs), plus whatever your registrar charges for the 12 domains. Add follow-ups to the daily count: a three-step sequence to 1,000 new people a day settles at several times that volume.
The point of the exercise is the direction of scaling. When you need more volume, add mailboxes and domains. Raising the per-mailbox number is the fastest way to turn a healthy setup into a spam-folder one.
Per-mailbox sending limits
There are two different numbers people call “the limit”, and confusing them is a common mistake.
- Platform limits are hard caps the provider enforces. Google Workspace, for example, allows 2,000 messages per user per day (1,500 through mail merge), 2,000 external unique recipients a day, and locks sending for up to 24 hours once a limit is hit. These are designed for normal business mail and say nothing about what is safe for cold outreach.
- Reputation limits are what receivers will tolerate from an address before engagement drops and filtering kicks in. For cold email the common working number is around 30 new messages per mailbox per day, which is also what cold-email vendors like Infraforge and Mailforge recommend in their own setup guides.
On a dedicated stack such as adbtd there is no platform cap at all: the IP is yours and so is the reputation. That is freedom, not permission. Our docs publish a recommended ramp, and the dashboard shows Google Postmaster and Microsoft SNDS data so you can see when a receiver starts to disagree with your volume.
Warmup
A new domain, mailbox or IP has no reputation. Receivers treat a stranger that suddenly sends hundreds of messages a day the same way they treat a spammer cycling through fresh addresses, so you ramp volume gradually and let positive signals (delivered, opened, replied to, not reported) accumulate first.
| days | per mailbox per day |
|---|---|
| 1–3 | 10 |
| 4–7 | 25 |
| 8–14 | 50 |
| 15+ | your target cold volume |
A conservative ramp. Slow down if bounces or complaints rise; a new dedicated IP may need longer than a new mailbox on an established one.
There are two ways to generate early, positive traffic. Warmup networks are tools that connect your mailbox to a pool of other mailboxes that open, reply to and rescue each other’s messages from spam. Organic warmup means starting with the people most likely to engage: existing customers, partners, warm leads. Most teams combine both. Warmup tools connect over SMTP and IMAP, so they work with any provider that gives you those credentials, adbtd included; we do not run a warmup network ourselves.
The Google, Yahoo and Microsoft sender rules
The three largest consumer mailbox providers now publish explicit requirements. They overlap heavily: authenticate with SPF and DKIM, publish DMARC, align the From domain, keep complaints low, and make unsubscribing easy.
| Google (Gmail) | Yahoo | Microsoft (Outlook.com) | |
|---|---|---|---|
| Applies to | Mail to personal Gmail accounts. Bulk = close to 5,000+ messages a day to Gmail, counted across subdomains; once bulk, always bulk. | Mail to Yahoo. Some rules for all senders, stricter ones for bulk senders. | Domains sending more than 5,000 messages a day to Outlook.com, Hotmail and Live addresses. |
| SPF / DKIM | All senders: SPF or DKIM. Bulk: both. | All senders: SPF or DKIM. Bulk: both. | SPF must pass and DKIM must pass. |
| DMARC | Bulk: a DMARC record, p=none is enough. From: aligned with SPF or DKIM. | Bulk: valid DMARC, at least p=none, and DMARC must pass. | At least p=none, aligned with SPF or DKIM (preferably both). |
| Unsubscribe | Marketing and subscribed mail: one-click unsubscribe (RFC 8058) plus a visible link, honoured within 48 hours. | Bulk: one-click List-Unsubscribe plus a visible link, honoured within 2 days. | Recommended, not required: a working unsubscribe link. |
| Spam rate | Below 0.3% in Postmaster Tools, ideally below 0.1%. | Below 0.3%. | Not specified; list hygiene and consent recommended. |
| Other | TLS, valid forward and reverse DNS (PTR), RFC 5322 formatting. | Valid forward and reverse DNS, RFC 5321 / 5322 compliance. | Compliant From / Reply-To addresses recommended. |
| Enforcement | Since February 2024; Google said it was ramping up enforcement, including temporary and permanent rejections, from November 2025. | Since February 2024. | Since May 5, 2025: non-compliant mail is rejected with 550 5.7.515 Access denied. |
Summarised from Google’s email sender guidelines and FAQ, Yahoo’s sender best practices and Microsoft’s Outlook.com high-volume sender requirements, as published in October 2026.
Three details that matter for cold email specifically:
- The thresholds are about receivers, not you. Google’s 5,000-a-day line counts messages to personal Gmail accounts, and its guidelines say they do not apply to mail sent to Google Workspace accounts. Most B2B prospects are on Workspace or Microsoft 365, whose own filters judge you on the same signals anyway. Treat the bulk rules as the baseline for every domain.
- Alignment is what DMARC actually checks. SPF passing for your provider’s bounce domain is not enough; the domain in the visible From address has to match the SPF or DKIM domain. A dedicated setup that signs with your own domain and uses your own return-path passes this by design.
- Unsubscribe still matters. Google requires one-click unsubscribe only for marketing and subscribed mail, but cold outreach is promotional by nature, and an easy opt-out is cheaper than a spam complaint. Include a plain-language opt-out line, and a
List-Unsubscribeheader if your sending tool supports it.
The setup checklist
- Register two to three secondary domains per ten mailboxes you plan, and redirect their websites to your main site.
- Publish SPF (ending in
-allor~all, under ten DNS lookups), a 2048-bit DKIM key, DMARC with arua=reporting address, and an MX record. Add MTA-STS and TLS-RPT if your provider supports them. - Check that your sending IP has a PTR record whose hostname resolves back to the same IP.
- Create mailboxes with real names and set up signatures and profile details.
- Send a real message from each new domain to check.adbtd.com, a free deliverability test, and fix everything it flags before you warm up.
- Connect the mailboxes to your sequencer and warmup tool over SMTP / IMAP and ramp for two to four weeks.
- Register your domains with Google Postmaster Tools and your IPs with Microsoft SNDS, and watch spam rate and reputation weekly.
- Once reports show all legitimate mail passes DMARC, move from
p=nonetop=quarantine. - Scale by adding mailboxes and domains, never by raising per-mailbox volume.
Where adbtd fits
adbtd gives each customer their own Postfix and Dovecot stack on at least one dedicated IP, with SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI records generated for every domain and audited every six hours. You bring the domains from any registrar, pay $1.99 per mailbox and $19 per dedicated IP a month, and connect any sequencer or warmup tool over SMTP and IMAP. There are no sending caps and no warmup network: you own the reputation, and the dashboard shows you how it is doing.
If you are weighing it against the mailbox resellers, we wrote honest comparisons with Google Workspace, Zapmail, Mailforge, Infraforge and Maildoso, including when each of them is the better choice.
Frequently asked
How many cold emails can I send per mailbox per day?
Around 30 new cold emails per mailbox per day is the common working number once a mailbox is warmed up. Cold-email infrastructure vendors such as Infraforge and Mailforge publish the same recommendation. Platform limits are much higher (Google Workspace allows 2,000 messages a day per user), but they are ceilings for normal use, not safe volumes for cold outreach. Scale by adding mailboxes and domains rather than pushing each mailbox harder.
How many mailboxes should I put on one domain?
Two or three is the usual answer. More mailboxes per domain concentrate risk: if the domain's reputation drops, every mailbox on it drops with it. Spreading volume over several secondary domains keeps one bad week from taking the whole programme down.
Do Google's bulk-sender rules apply if I send fewer than 5,000 emails a day?
Part of them, yes. Every sender to personal Gmail accounts needs SPF or DKIM, valid forward and reverse DNS, TLS, RFC 5322 formatting and a spam rate below 0.3%. The bulk-sender extras (both SPF and DKIM, a DMARC record, alignment, one-click unsubscribe for marketing mail) kick in around 5,000 messages a day to Gmail, and Google counts subdomains together. Publishing SPF, DKIM and DMARC from day one costs nothing and removes the question.
Is DMARC p=none enough in 2026?
It is the minimum Google, Yahoo and Microsoft require for bulk senders. Once your DMARC aggregate reports show that all your legitimate mail passes, moving to p=quarantine or p=reject protects the domain from spoofing and is a stronger trust signal.
Do I need a dedicated IP for cold email?
Not necessarily. Google Workspace and Microsoft 365 mailboxes send from the provider's shared infrastructure, and many teams run cold email that way. A dedicated IP means your reputation is yours alone: nobody else's complaints affect you, and you are the only one who can damage it. It needs a warmup period, because a new IP has no history.
How long does warmup take?
Plan for two to four weeks of gradual ramp before full cold volume, longer for a brand-new IP. Start at around 10 messages per mailbox per day, increase every few days while bounces and complaints stay low, and send the early volume to people likely to engage.
Set up dedicated cold email infrastructure
Your own mail server on a dedicated IP, your domain in every header. Live in about ten minutes once your DNS resolves. Cancel any month.