MailWizz Sender Domain Rotation — Managing Multiple Sending Domains for Deliverability

Rotating the sender domain across campaigns is sometimes used to distribute reputation risk or to present different brand identities to different segments. However, domain rotation has specific implications for DMARC alignment configuration, DKIM configuration, and ISP reputation building.

Configuring Multiple From Domains in MailWizz

# MailWizz does not have a built-in domain rotation feature
# Domain rotation is implemented by:
# 1. Creating separate Delivery Server records per domain
# 2. Assigning each campaign to the appropriate Delivery Server
# 3. Or: Creating separate customer accounts per domain

Authentication Requirements per Sending Domain

• Each sending domain requires its own SPF record listing the sending IPs
• Each domain requires its own DKIM private key and DNS selector configured in PowerMTA
• Each domain requires its own DMARC policy in DNS
• Failure to configure authentication for a new domain means DMARC failure for all sends from that domain

When Domain Rotation Helps

• Sending on behalf of different brands that are genuinely separate (agency/multi-brand deployment)
• Separating product lines with distinct audiences and different engagement profiles
• Testing a new domain while maintaining the established domain for proven segments

When Domain Rotation Is Counterproductive

• Rotating domains to escape a reputation problem — ISPs track IP reputation independently of domain; a new domain on the same IP inherits IP reputation
• Rotating across domains that share the same sending IPs — the IP reputation is what ISPs primarily track
• High-frequency rotation (every campaign) — prevents any domain from building the send history that positive reputation requires

Troubleshooting Common Issues

Production MailWizz deployments encounter predictable issues at predictable stages. Understanding the diagnostic workflow for the most common problems in this configuration area saves time and prevents the escalating complexity that comes from applying fixes to a misdiagnosed problem. The diagnostic approach is always the same: identify the symptom precisely (not just "it's not working"), isolate the layer where the failure occurs (MailWizz application, delivery server connection, DNS, ISP rejection), and fix at the correct layer.

Systematic Diagnosis Approach

Check MailWizz logs first (available in Backend → Misc → Application Logs), then check the delivery server SMTP logs, then check the PowerMTA accounting log. Most issues surface in one of these three places. A problem that does not appear in any of these logs is almost always a configuration issue — the system is not attempting what you expect it to attempt.

# MailWizz diagnostic log locations:
# Application logs: Backend → Misc → Application Logs
# Delivery logs: Backend → Campaigns → [Campaign] → Delivery Logs
# Bounce logs: Backend → Bounce Servers → [Server] → Logs

# Server-side logs:
# MailWizz application: /path/to/mailwizz/apps/common/runtime/application.log
# PowerMTA delivery: /var/log/pmta/pmta.log
# PowerMTA accounting: /var/log/pmta/accounting.csv

Performance Optimization for Production Scale

MailWizz performance at scale depends on three infrastructure layers: the web application server (PHP/nginx or Apache), the database (MySQL — query optimization is critical at high subscriber counts), and the delivery infrastructure (PowerMTA connection pool sizing). Performance problems in any of these layers manifest as slow campaign sends, delayed processing, or timeouts that appear unrelated to the specific configuration area being managed.

The most common performance constraint in production MailWizz environments is MySQL query efficiency. As subscriber lists grow beyond 500,000 records, unoptimized database queries for segmentation, bounce processing configuration, and campaign statistics become significant bottlenecks. Ensure that subscriber tables have appropriate indexes on email, status, date_added, and any custom field columns used for segmentation.

# MySQL optimization for large MailWizz installations
# Check slow query log:
SHOW VARIABLES LIKE 'slow_query_log%';
SET GLOBAL slow_query_log = 'ON';
SET GLOBAL long_query_time = 1;  # Log queries over 1 second

# Key indexes to verify exist:
SHOW INDEX FROM mailwizz_lists_subscribers;
# Should have indexes on: email, status, date_added, list_id

# Add missing index if needed:
ALTER TABLE mailwizz_lists_subscribers 
  ADD INDEX idx_email_status (email, status);
  
# Campaign sends table — index on campaign_id + subscriber_id:
ALTER TABLE mailwizz_campaigns_tracking_opens
  ADD INDEX idx_campaign_sub (campaign_id, subscriber_id);

Security Considerations

MailWizz installations handling production sending volumes are valuable targets. Key security practices: use HTTPS for all MailWizz access (including tracking and unsubscribe links), restrict Backend access to authorized IP ranges via web server configuration, rotate API keys periodically and revoke unused keys, maintain regular database backups (automated, offsite), and ensure PHP and MailWizz are kept current with security patches.

The tracking domain (used for open and click tracking) requires special attention: it must have a valid SSL certificate (Let's Encrypt is acceptable), and its DNS records must point exclusively to your MailWizz server. A compromised tracking domain can redirect recipients to malicious sites or reveal subscriber click data to third parties.

Campaign Analytics Integration

Track this MailWizz configuration area through two complementary metric layers: MailWizz campaign statistics (open rate, click rate, bounce rate, unsubscribe rate) and PowerMTA accounting log data (ISP-specific deferral rate, bounce classification, queue depth). Gaps between the two layers reveal delivery problems invisible to MailWizz statistics alone — high MailWizz "sent" counts with elevated PowerMTA deferral rates indicate a queue buildup that campaign dashboards don't surface.

Review campaign metrics against your own historical baselines rather than industry benchmarks. Your list composition, acquisition source, and engagement history define what normal looks like for your environment. Use rolling 7-day and 30-day averages to distinguish trend changes from campaign-specific variance.

Implementation Checklist

Before deploying this configuration to production MailWizz, verify: delivery server connection test passes in Backend → Servers → Delivery Servers, cron jobs are running on the correct schedule, bounce server mailbox is accessible and IMAP credentials are valid, tracking domain has valid SSL and loads within 500ms, and PHP memory limit is set to at least 256MB.

After deploying, send a test campaign to a controlled list of seed addresses across Gmail, Outlook, and Yahoo. Verify Authentication-Results headers show dkim=pass and spf=pass in the received messages. Check that open and click tracking are registering correctly in MailWizz statistics. Confirm bounce processing is updating subscriber status within 15 minutes of a test bounce event.

For managed MailWizz environments operated by Cloud Server for Email, these verification steps are performed automatically after any configuration change. The managed service includes continuous monitoring of delivery server health, cron job execution, and tracking domain availability. Contact infrastructure@cloudserverforemail.com for information about managed MailWizz hosting.

Domain Rotation Strategy and Reputation Management

Domain rotation distributes sends across multiple From: domains to limit per-domain reputation exposure. Each rotation domain needs its own DKIM keys, SPF authorization, and DMARC policy. Monitor each domain's Postmaster Tools independently — reputation events at any domain in the rotation affect that specific domain's deliverability regardless of the others. Rotation is not a reputation reset mechanism.

When to Use Domain Rotation

Domain rotation is appropriate for: multi-brand senders who need brand-specific From: addresses, environments where one domain is in recovery and another handles production, and A/B testing campaignsing of brand presentation. It is not appropriate as a workaround for poor sending practices — ISPs track reputation at both domain and IP level, and rotation doesn't reset the underlying reputation signals.