Emails sent directly from a virtual private server (VPS) often land in spam because mailbox providers cannot yet establish enough trust in the server, domain, message, or recipient behavior. A new or previously abused IP address, missing reverse DNS, incomplete SPF/DKIM/DMARC authentication, TLS or formatting errors, and spam complaints can each lower delivery. Passing a single online mail tester does not guarantee inbox placement.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
The reliable fix is a sequence: give the VPS a stable hostname with matching forward and reverse DNS, publish one complete SPF record, sign every message with DKIM, deploy DMARC with domain alignment, use TLS and valid RFC 5322 formatting, then control bounces, complaints, volume, and reputation. If the IP remains distrusted or the operational burden is too high, route transactional mail through a managed SMTP service instead of sending directly.
As an Amazon Associate I earn from qualifying purchases.
What “spam” means for mail sent from a VPS
Mailbox providers make a risk decision for each message, not a simple authentication yes-or-no decision. They combine the sending IP and domain’s reputation with DNS identity, authentication results, message quality, recipient expectations, complaint rates, sending patterns, and technical compliance. Google describes these factors in its Gmail sender guidelines.
A message can therefore pass SPF and DKIM yet still be placed in spam, throttled, or rejected. Authentication proves that a sender is authorized; it does not prove that recipients want the message. Conversely, a legitimate message can fail because the VPS has no trustworthy reverse-DNS identity or shares an IP range with abusive senders.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Why VPS-originated mail is commonly filtered
New or previously abused IP space
Cloud and VPS providers frequently allocate addresses that have little sending history. Some addresses have previously hosted compromised sites, malware, or unsolicited campaigns. Providers evaluate the current IP’s behavior and, in some cases, the reputation of the surrounding range. Google notes that activity from a shared IP can affect every sender using it and that messages from blocklisted IPs are more likely to be classified as spam.
Missing or contradictory DNS identity
Direct SMTP delivery requires a recognizable server identity. If the VPS announces a hostname that has no DNS record, has a generic provider name, or does not match its reverse-DNS (PTR) record, receiving systems have less evidence that the server is legitimate.
Free tools Windows power users keep installed
One-click scans. No signup required.
Incomplete authentication
Without SPF, DKIM, and DMARC, a receiver cannot reliably connect the visible From: domain to an authorized sending system. Multiple SPF records, an expired DKIM key, or a DMARC policy that is misaligned with the visible From domain can produce the same practical result as having no authentication.
Low-quality recipient signals
Hard bounces, purchased or stale lists, ignored messages, and “Report spam” clicks damage reputation. Gmail says frequent spam reports make future messages from the sender more likely to be classified as spam. Sending only to people who requested the mail is therefore a technical control, not merely a marketing preference.
Transport and message-format failures
Receiving providers expect encrypted transport where available and correctly formatted Internet messages. Gmail lists TLS and RFC 5322-compliant formatting among its sender requirements. Broken headers, malformed MIME boundaries, invalid dates, or an unencrypted SMTP session can trigger filtering even when DNS authentication passes.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Requirements published by the major mailbox providers
The requirements below are the practical baseline for direct VPS delivery. Policies change, so consult the linked guidance when a provider returns a new error code.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute| Provider | Baseline for ordinary senders | Additional bulk-sender expectations | Official guidance |
|---|---|---|---|
| Gmail | At least SPF or DKIM for all senders; valid DNS identity, TLS, and correctly formatted messages are expected. | More than 5,000 messages per day to Gmail accounts requires SPF, DKIM, DMARC, alignment, TLS, and spam-rate monitoring. Google states a target spam rate below 0.30%. | Gmail sender guidelines |
| Yahoo | SPF or DKIM, sound DNS, aligned domains, and a positive reputation are expected; Yahoo’s FAQ specifies DKIM keys of 1,024 bits or greater. | High-volume senders should implement DMARC, monitor complaints, and maintain predictable list practices. | Yahoo best practices and Yahoo FAQ |
| Microsoft consumer and Microsoft 365 mailboxes | Correct MX, SPF, DKIM, DMARC, DNS identity, TLS, and responsible list management support delivery. | Higher-volume traffic is evaluated more strictly for authentication, alignment, complaint rates, and IP/domain reputation. | Microsoft mail-flow best practices and Microsoft DMARC guidance |
Fix the VPS in the right order
1. Choose one permanent mail hostname
Pick a dedicated name such as mail.example.com and use it consistently in the SMTP greeting, certificate, and server configuration. Avoid changing the hostname between deliveries; a stable identity gives receiving systems a history to evaluate.
- In the DNS zone for your sending domain, create an A record for
mail.example.compointing to the VPS’s public IPv4 address. - If the server sends over IPv6, create an AAAA record and ensure the IPv6 address is also dedicated, routable, and covered by your reputation monitoring.
- Ask the VPS host to set the IP’s PTR (reverse-DNS) record to
mail.example.com. Many hosts expose this in the networking panel; others require a support request. - Check that looking up
mail.example.comreturns the same public IP that performs the SMTP connection. Google explicitly requires a sending SMTP IP to have a PTR record resolving to a hostname, and that hostname should resolve back to the sending IP. See the Gmail sender guidelines.
Do not use a PTR name that resolves only to a shared provider hostname, and do not publish several conflicting PTR values. Reverse DNS is controlled by the IP owner, so changing your domain’s ordinary DNS records alone cannot fix a missing PTR.
2. Publish one complete SPF record
SPF is a TXT record on the envelope-from (return-path) domain. It lists every system allowed to send for that domain: the VPS, a web application, a backup relay, or any other service that legitimately originates mail.
- Inventory all legitimate senders before editing DNS. Include the VPS’s public IP and any relay or provider that sends password resets, invoices, support replies, or alerts.
- Create a single TXT record at the domain root. A minimal VPS-only example is
v=spf1 ip4:203.0.113.10 -all; replace the address with the real sending IP. - If another service sends mail, add its documented
include:mechanism or IP to the same record. Never publish two separate SPF TXT records for one domain. - Keep the record within SPF’s DNS-lookup limit. Flattening or removing obsolete includes may be necessary when the record becomes too complex.
- Recheck SPF after every relay, DNS, or hosting change. An old include can authorize a service that no longer belongs to you, while an omitted new sender creates soft or hard failures.
SPF authenticates the envelope sender, not necessarily the address a user sees in the From header. DMARC alignment, covered below, connects those identities.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
3. Generate and verify a DKIM signature
DKIM adds a cryptographic signature to each message. The receiving provider retrieves the public key from DNS and verifies that selected headers and the body were not altered after signing.
- Generate a DKIM key pair in your mail-transfer agent (MTA) or mail stack. Use a unique selector such as
vps2026so keys can be rotated without downtime. - Publish the public key as a TXT record at
vps2026._domainkey.example.com. Copy the exact value produced by the MTA, including line breaks handled by your DNS interface. - Configure the MTA to sign outbound mail with the private key and the domain that will align with the visible From address.
- Send a test message to an account you control and inspect the full headers. Look for
dkim=pass, the expected signing domain, and the selector you published. - Rotate keys periodically by publishing a new selector, switching the signer, waiting for DNS propagation, and retiring the old selector only after messages signed with it have aged out.
Google recommends a 2,048-bit DKIM key where supported and requires at least 1,024 bits for Gmail personal accounts. Yahoo’s current FAQ also specifies a minimum of 1,024 bits. Those are key-length requirements, not a promise of inbox placement.
4. Add DMARC without locking out legitimate mail
DMARC tells receivers what to do when SPF and DKIM fail alignment with the visible From domain and where to send aggregate reports. A message passes DMARC when either SPF or DKIM both authenticates and aligns with that From domain.
- Start with a monitoring policy at
_dmarc.example.com, for examplev=DMARC1; p=none; rua=mailto:[email protected]. Use a mailbox or reporting service that can handle XML aggregate reports. - Collect reports long enough to identify every legitimate sender, including forgotten web forms and third-party systems.
- Correct SPF scope, DKIM signing domains, or From-address choices for sources that fail alignment.
- After legitimate traffic passes consistently, move selected traffic toward
p=quarantine, thenp=rejectwhen you are confident unauthorized mail should be refused. Add a percentage or subdomain policy only when you understand its effect.
DMARC policy is not a substitute for list hygiene. It prevents domain impersonation and gives visibility into unauthorized sources; it cannot make an unwanted campaign desirable.
5. Require TLS and valid message formatting
Configure the MTA to use STARTTLS when the recipient advertises it and install a certificate whose name matches the SMTP hostname. Keep the MTA, TLS libraries, and operating system patched.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Generate standards-compliant headers: a single valid Date, a stable Message-ID, correctly encoded non-ASCII text, and properly nested MIME parts. Ensure line endings and header folding follow RFC 5322. Test plain-text and HTML alternatives separately, because malformed HTML or tracking markup can alter how a message is scored.
6. Send only wanted mail and manage failures
- Use confirmed or clearly documented opt-in for newsletters, alerts, and account messages.
- Suppress hard bounces immediately. Repeated delivery attempts to dead addresses look abusive and waste reputation.
- Honor unsubscribe requests promptly and keep suppression lists separate from active audiences.
- Investigate complaints rather than repeatedly mailing people who ignore or report messages.
- Keep volume and cadence predictable. Sudden bursts from a cold IP are harder to classify than a steady stream.
- Separate transactional and promotional traffic by subdomain, and preferably by IP or authenticated stream, so a campaign problem does not automatically damage password-reset mail.
Gmail’s current volume and spam-rate rules
Google’s bulk-sender threshold is more than 5,000 messages per day to Gmail accounts. At that level, Google requires SPF, DKIM, DMARC, alignment between the authenticated domain and the visible From domain, TLS, and spam-rate monitoring. Google states a spam-rate target below 0.30%.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The threshold is based on Gmail-recipient volume, not the total number of messages your VPS sends to every provider. A server sending 2,000 messages to Gmail and 10,000 elsewhere is not automatically a Gmail bulk sender under that figure, but the other providers can still enforce their own reputation rules. Keep volume below sudden peaks, monitor complaint trends, and do not treat the 5,000 figure as a safe daily quota.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to diagnose a message that still goes to spam
Read the SMTP response and full headers
Save the complete delivery transcript and the recipient’s headers. A temporary 4xx response usually calls for controlled retry with backoff; a permanent 5xx response requires correcting the stated policy or identity problem before retrying. In the delivered message, inspect the Authentication-Results header for SPF, DKIM, and DMARC results, the signing and return-path domains, and the receiving provider’s reason text.
Separate identity failures from reputation failures
If SPF, DKIM, or DMARC fails, fix DNS or MTA configuration first. If all three pass and the message is still spam-foldered, examine IP and domain reputation, complaint rate, content expectations, list sources, and sending spikes. Authentication passing narrows the diagnosis; it does not clear the sender.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Check DNS from outside your network
Verify A, AAAA, MX, PTR, SPF, DKIM, and DMARC records using more than one resolver. Look for stale caches, accidental duplicate SPF records, truncated TXT values, an AAAA record pointing to an unconfigured address, and a DKIM selector that does not match the signature.
Investigate blocklists carefully
A blocklist listing can explain a rejection, but not every public list carries equal weight. Confirm the listing, identify the cause, stop the abusive or compromised behavior, and follow that list’s removal process. Requesting removal without correcting the source often leads to a repeat listing.
Use provider feedback tools
Google’s Postmaster Tools can show domain and IP reputation, authentication, delivery errors, and spam trends for qualifying traffic. Google says it helps senders analyze performance and deliver messages to the right place; its Postmaster Tools FAQ explains access and data limitations. Also review your MTA logs, bounce classifications, and aggregate DMARC reports. Data may be delayed or unavailable for low-volume domains, so a blank dashboard is not proof that delivery is healthy.
Direct VPS sending versus a managed SMTP provider
Moving mail to a managed transactional provider can solve operational problems, but it does not guarantee inbox placement. The choice is about who owns each responsibility and how much control you need.
| Decision area | Send directly from the VPS | Use a managed SMTP service |
|---|---|---|
| IP and configuration control | Full control of MTA, IP, queues, TLS settings, and deployment timing. | Configuration follows the provider’s controls; dedicated-IP options may be available but are not universal. |
| PTR, SPF, DKIM, and DMARC | You must coordinate reverse DNS with the host and maintain every DNS and key change. | The service supplies documented DNS records and signing workflows, while you still publish and monitor them. |
| Reputation and warm-up | You build reputation from the VPS IP and carry the risk of its prior history or neighboring abuse. | The provider operates established infrastructure, but your content, recipients, and complaint rate still affect delivery. |
| Bounces and complaints | You must classify SMTP responses, process feedback, and maintain suppression lists. | Dashboards and webhooks often reduce this work, but integration and policy review remain yours. |
| Volume and scaling | Capacity depends on VPS resources, provider limits, queue design, and recipient throttling. | Scaling and queue management are usually simpler, subject to account limits and approval. |
| Cost predictability | The server may already be paid for, but engineering and incident time are variable. | Usage-based fees are easier to attribute but add a recurring vendor bill. |
| Migration effort | No external migration; you retain existing SMTP credentials and message flow. | Update application credentials, DNS records, webhooks, and possibly templates and suppression logic. |
Stay direct when you need low-level control, have a stable dedicated IP, send modest predictable volumes, and can operate DNS, authentication, abuse response, and monitoring. Prefer managed delivery when the VPS IP remains distrusted, sending volume is high, deliverability is business-critical, or no one can reliably handle bounces and complaints.
Recommended Free Tools
A practical maintenance runbook
- Review delivery logs and 4xx/5xx trends weekly; classify temporary throttling separately from permanent policy failures.
- Check DMARC aggregate reports for new unauthorized senders and alignment regressions.
- Track Gmail Postmaster Tools data when sufficient volume exists, including IP/domain reputation and spam trends.
- Reconcile your application’s sender inventory whenever a feature, relay, or vendor changes.
- Rotate DKIM keys on a documented schedule and test the new selector before retiring the old one.
- Audit bounce and complaint suppression so deleted, opted-out, or invalid addresses cannot re-enter the send list.
- Review VPS security patches, SMTP authentication logs, and outbound volume for signs of compromise.
- Plan a fallback route for critical transactional mail, but test it before an outage; a second unconfigured sender can create SPF, DKIM, or DMARC failures.
When to stop sending directly from the VPS
Direct delivery is reasonable only when the server has a clean, stable identity and you can continuously operate it as a mail system. Change course when you cannot obtain matching PTR and forward DNS, the address has a persistent abuse history, provider throttling blocks normal traffic, or your team cannot process complaints and bounces promptly. A managed service reduces infrastructure work, but you still need aligned authentication, opt-in recipients, correct formatting, and disciplined volume. No routing option can guarantee that every message reaches the inbox.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
