Email & Smart IP Routing

Hosting email with a multi-IP sending pool

Postfix, Dovecot, Rspamd and Amira Webmail in every edition, with login protection and sending limits so one hacked mailbox cannot spoil the server's reputation. Solo Full and Agency add a multi-IP sending pool (IPv4 and IPv6) with blocklist checks, warm-up and per-domain pinning, plus built-in email marketing. Agency adds Domain Security for DMARC and a spam filter per mailbox.

27 MCP tools Mail server & mail protection: all editionsIP pool & marketing: Solo Full and AgencyDomain Security & mail gateways: Agency
Why AI

Why Amira Email

One blocklisted address can stop a whole server's mail. Amira gives you the tools to send from several addresses and to notice problems early.

A Sending Pool, Not One Address

Most panels send a server's mail from one address by default. If it gets listed, mail for every site on the server can bounce.

With the sending pool (Solo Full and Agency), you add several addresses. If one gets listed, its domains move to healthy addresses. You can pin a busy sender to its own address.

IPv6 Next to IPv4

IPv4 addresses are scarce. Most providers give you IPv6 addresses for free.

You can add IPv6 addresses to the pool next to IPv4. Each needs its own reverse DNS (PTR) at your provider and goes through warm-up.

No Per-Email Fees

Mail delivery services charge per email sent.

Amira sends from your own server. The sending pool, blocklist checks, warm-up, DKIM/SPF/DMARC, Rspamd, ClamAV and email marketing are part of the panel, with no per-email cost.

Blocklist Checks Every 5 Minutes

A single spammy site can hurt the reputation of a whole server.

Amira checks every address in the pool against 7 blocklists every 5 minutes. A listed address leaves the pool, other mail keeps flowing, and you get an alert so you can ask for delisting.

A Hacked Mailbox Stays Small

Most blocklistings start with one stolen password or one hacked contact form.

Login Protection spots password guessing from many addresses and locks weak mailboxes to the places they normally log in from. Sending Limits hold mail over the hourly or daily limit and pause a mailbox that suddenly sends far more, before the server's address gets listed.

What Amira Replaces

The usual way compared with doing it in Amira.

Traditional ApproachWith AmiraYou Save
Mail delivery serviceYour own server — no per-email feePer-email charges
Separate spam filter serviceRspamd + ClamAV includedA monthly fee
Mailchimp or similar for a small listBuilt-in email marketing (Solo Full and Agency)A monthly fee
Manual DKIM/SPF/DMARC recordsPublished for youTime per domain
Manual blocklist checksChecks every 5 minutes + failoverTime every week
Solo Full & Agency

Smart IP Pool Routing

Send mail from several IPv4 and IPv6 addresses, built into the panel.

Add IPv4 and IPv6 addresses to your sending pool. The panel gives each sending domain an address: the one you pinned, or the next healthy address in turn. If an address gets listed on a blocklist, the panel moves its domains to healthy addresses and updates Postfix and SPF, with no manual work.

claude — email
$ Set up email for startup.io with DKIM and add 3 IPv6 addresses to the pool
✔ MX records configured
✔ DKIM key generated (2048-bit RSA)
✔ SPF + DMARC records added (IPv4 + IPv6)
✔ team@startup.io mailbox created
✔ 3 IPv6 addresses added to IP pool (warmup started)
→ Pool: 1 IPv4 + 3 IPv6 — RBL monitoring active
Solo Full & Agency

IPv6 in the Sending Pool

Add IPv6 sending addresses next to IPv4.

Every edition can receive mail over IPv6 when the server has an IPv6 address. Solo Full and Agency can also add IPv6 addresses to the sending pool next to IPv4. Each address gets its own SPF entry and goes through warm-up. Set its reverse DNS (PTR) at your provider; big providers such as Gmail are strict about IPv6 senders.

IPv6 in the Sending Pool

Panel UI API
Solo Full & Agency

RBL Auto-Monitoring & Failover

Blocklist checks against 7 lists, with automatic failover.

Every address in your sending pool is checked against 7 blocklists (including Spamhaus ZEN, SpamCop, Barracuda and UCEPROTECT) every 5 minutes. A listed address is taken out of the sending pool and comes back when it is delisted, and you get an alert so you can ask for delisting. Lookups go through a local resolver on the server, because Spamhaus does not answer reliably through public resolvers. In Agency, the RBL Monitor also checks mail gateway addresses, can check any IP you type in, and links to each list's removal page.

RBL Auto-Monitoring & Failover

Panel UI API
Solo Full & Agency

IP Warm-Up

New addresses start in a warm-up period.

New addresses need to build a sending reputation slowly. In Solo Full each warming address sends at a set hourly limit (50 per hour by default, configurable per address); Agency keeps warming addresses out of the sending pool. After the warm-up period (30 days by default) the address becomes active automatically.

IP Warm-Up

Panel UI API
All editions

DKIM / SPF / DMARC

Email authentication records, set up for you.

Amira makes a 2048-bit DKIM key and publishes the DKIM, SPF and DMARC records for you, in PowerDNS or at Cloudflare. In Agency this happens when you create the first mailbox; in Solo, with one click on the Email page. SPF includes your sending-pool addresses. No manual DNS editing.

DKIM / SPF / DMARC

Panel UI MCP Tool API
Agency

Domain Security (DMARC)

Find out which domains can move DMARC to quarantine without losing real mail, and switch them.

With p=none, Gmail and Outlook still deliver fakes that use your domain. Domain Security gives every hosted domain a verdict (protected, safe, no mail, check first, fix DKIM first) from its live DNS: where its mail is hosted (Microsoft 365 and Google Workspace need their own DKIM records), outside senders in SPF, and what this server really sends as the domain. "Switch" and "Switch all safe domains" show the exact record change first, then write it where the zone is live — Cloudflare or this server's DNS; other DNS hosts get the record to set by hand. Government domains are only included when you tick them. Customers see the verdict for their own domains and can switch them when safe.

Domain Security (DMARC)

Panel UI MCP Tool API
All editions

Login Protection

See failed mail logins per mailbox and stop password guessing from many addresses.

Failed IMAP, POP3 and SMTP logins are counted per mailbox and hour, with their addresses, and you can see where each mailbox logged in from. Password guessing from many addresses, which per-address bans cannot stop, raises an alert. If the mailbox has a weak password, it is locked to the addresses it used in the last 30 days for 24 hours. You can also lock a mailbox by hand to known addresses only, or to webmail only. A new password lifts an automatic lock.

Login Protection

Panel UI MCP Tool API
All editions

Sending Limits

Hourly and daily limits per mailbox; mail over the limit is held, not sent.

Each mailbox has a limit on recipients per hour and per day (200 and 1,000 by default; Agency also limits each hosting account). Mail over a limit is held in the queue for you to release or delete per sender. A mailbox that tries to send about twice its limit is paused automatically, as it is probably hacked, and you get an alert. Email marketing campaigns and panel notifications are not counted.

Sending Limits

Panel UI MCP Tool API
All editions

Delivery Logs and Track Delivery

Find what happened to any message, in plain words.

Delivery Logs show real mail first (delivered, retrying, bounced); refused attempts such as relay bots, spam blocklists and unknown recipients are behind their own button. Common answers from Gmail and Microsoft are explained in plain words, with the raw answer one click away. Agency also searches by address or domain on either side, queue ID (the whole journey of one message), text in the other server's answer and any date range, including older rotated logs, and exports to CSV. Its customers and resellers get Track Delivery: the same search for mail from or to their own domains.

Delivery Logs and Track Delivery

Panel UI MCP Tool API
Solo Full & Agency

Email Marketing (Replaces Mailchimp)

Campaigns, mailing lists, templates, subscriber management — built into the panel.

Build and send email campaigns from your own server. Create mailing lists with custom fields, design HTML emails with templates, add subscribers one by one or from a CSV file, and track opens, clicks, bounces and unsubscribes. Includes RFC 8058 one-click unsubscribe and a send-rate limit. The AI tools can create campaigns, manage subscribers and report results.

Email Marketing (Replaces Mailchimp)

Panel UI MCP Tool API
All editions

Rspamd + ClamAV

Spam filtering on every incoming message, virus scanning when you want it.

Rspamd checks SPF, DKIM and DMARC on incoming mail and filters spam, and mail it scores as spam goes to the mailbox's Junk folder. ClamAV is installed too; its scanning service uses about 1 GB of memory, so it is off by default and you start it when your server has room. In the panel you can turn on greylisting, block or allow sender domains, and filter by country. fail2ban bans addresses that guess mail passwords and bots that try to relay spam through the server. In Agency, marking a message as spam in webmail teaches the filter.

Rspamd + ClamAV

Panel UI MCP Tool API
Agency

Spam Filter per Mailbox

Each mailbox can set its own spam score, allowed and blocked senders, and Junk clean-up.

A mailbox can use its own spam score, keep spam in the Inbox, delete mail above a score on arrival, allow or block senders by address or domain, and empty Junk and Trash of messages older than a number of days. Apply the settings to every mailbox of the domain at once. The mailbox's Disk usage view shows each folder's size and top senders, and cleans up old or large messages after a preview.

Spam Filter per Mailbox

Panel UI MCP Tool API
All editions

Certificates for mail.<domain>

Outlook and phones set up with mail.<domain> connect without a certificate warning.

Postfix and Dovecot present each domain's own certificate for mail.<domain> and <domain> on IMAP, POP3 and SMTP, and Let's Encrypt certificates include mail.<domain> when it points at the server. In Agency, webmail.<domain> opens the webmail with a valid certificate too, and a public sending address gets a certificate for its mail name.

Certificates for mail.<domain>

Panel UI API
Agency

Website Mail Sent as the Site's Domain

Contact forms and shop mail leave with the site's own address and pass SPF.

When a site sends mail from an address at one of its own domains, the message leaves with that address as sender instead of the server's, so Gmail judges each domain by its own reputation and SPF aligns for DMARC. A hosting account can only send as its own domains: it cannot use another account's domain or sign with its DKIM key. Hosting accounts also cannot send straight to other mail servers on port 25, so all mail goes through the sending limits.

Website Mail Sent as the Site's Domain

Panel UI API
Agency

Mail Gateways (Agency)

Send and receive mail for a server at home or behind NAT through a small public VPS.

Rent a small VPS with a public IPv4 and reverse DNS and add it as a gateway. The gateway runs only WireGuard and a firewall — no mail software: mail ports are forwarded to your server with the real client addresses kept, and outgoing mail leaves with the gateway's address and reverse DNS. Several gateways join the sending pool with failover, and a preflight checks SSH, port 25, reverse DNS, DNS records and blocklists before setup.

Mail Gateways (Agency)

Panel UI MCP Tool API
All editions

Webmail

Webmail in any browser, ready as soon as you create a mailbox.

Webmail is ready on your panel's domain (for example webmail.example.com) as soon as you create a mailbox. Both editions use Amira Webmail, built into the panel, so no PHP webmail application faces the internet: folders, search, a rich-text editor, attachments, mail filters, a vacation reply, and contacts import/export (vCard, CSV, Google or Outlook). Remote images load through the server, so senders never see the reader's address. Solo's upgrade moved Roundcube's address books and signatures across.

Webmail

Panel UI API

Frequently Asked Questions

Try Email & Smart IP Routing Today

Start free with Solo Community — 143 MCP tools and the full panel.