Deliverability · Practical guide
Custom Return-Path alignment: verify the envelope your provider uses
Check whether the provider supports a custom envelope domain and whether it supplies an aligned passing SPF path.
Reviewed · Examples are illustrative
Who this helps: Operators diagnosing authentication, receiving-policy and delivery failures.
Define the decision
The delivered Return-Path reflects the envelope sender used for bounce routing. Editing a visible From address or manually inserting a Return-Path header in content does not establish the envelope identity used by the transport.
Work through the procedure
- Inspect a fresh receipt and identify the evaluated smtp.mailfrom domain.
- Check the provider’s supported custom bounce-domain configuration.
- Have the domain owner publish only the required records and activate the provider setting.
- Verify SPF and alignment on a new message while confirming bounce handling still works.
Worked example
The following is a synthetic example for this procedure, not a customer result or performance benchmark.
From: [email protected]
Current envelope: [email protected]
Candidate supported envelope: [email protected]
Verification: provider actually uses the custom domain and the receiver reports the intended alignmentRead the result
The domain’s appearance is not enough: SPF must pass for the actual sending infrastructure. An aligned DKIM path may already satisfy DMARC, so document the reason for adding another configuration dependency.
Check before moving on
- Test bounce routing with a controlled provider-supported procedure.
- Do not assume Zintara can override a provider-managed envelope.
Limits and next action
The reviewed product has no general custom Return-Path setup wizard. This is a provider-side configuration procedure, subject to the provider’s supported capabilities.
Source references
Worked examples are illustrative. Editorial procedures are suggested methods, not measured performance claims or promises of additional product features.
Related guides
- DMARC: connect authentication to the visible From domain →
- Set up DMARC with a sender inventory and a working report destination →
- Why DMARC can fail when SPF and DKIM pass →