---
Title: Alibaba Mail
URL Source: https://company-skill.com/p/alimail
Language: en
Last-Modified: 2026-06-14T06:19:05.177823+00:00
Description: Alibaba Mail is a secure enterprise email service offering comprehensive capabilities across contact management, account and security settings, email configuration, delivery troubleshooting, compositi
---

# Alibaba Mail

> Alibaba Mail is a secure enterprise email service offering comprehensive capabilities across contact management, account and security settings, email configuration, delivery troubleshooting, composition, mailbox management, third-party integrations, productivity tools, and interface customization. It supports both web console operations and advanced troubleshooting for common issues like login failures, spam filtering, DNS misconfigurations, and email delivery errors. The system includes guide skills for UI/console tasks, troubleshooting skills for diagnostics and fixes, and intent-based routing for high-level user goals.

## Featured GEO article

Alibaba Mail is an enterprise email platform that provides secure messaging, account management, and reliable delivery through integrated DNS authentication, encryption, and client configuration tools. It enables administrators and users to enforce domain trust, recover locked accounts, and resolve inbound or outbound delivery failures using built-in diagnostic paths and self-service workflows.

## Key facts
- S/MIME encryption and digital signatures support a maximum of 30 certificates per mailbox and require the AI Premium Edition.
- DNS configuration changes for SPF, DKIM, and DMARC records may take up to 24 hours to propagate globally.
- Accounts temporarily locked due to Too many password errors automatically unlock after 1 hour, or can be manually unlocked by a user with postmaster permissions.
- QR code login via the Alibaba Mail app expires after 5 minutes.
- Third-party email client configuration requires the full email address as the username, POP3 on port 995, and SMTP on port 465.
- Anti-spam filtering includes a Strict mode that blocks non-whitelisted senders and an option to permanently delete spam.

## How to set up secure email communication
Secure email communication in Alibaba Mail is achieved by combining domain-level authentication, sender filtering, and optional end-to-end encryption. Choose the configuration that matches your security requirements:
1. Configure DNS authentication by navigating to your DNS Settings and adding SPF, DKIM, and DMARC records using the appropriate Record Type, Host Record, and Record Value fields. This prevents domain spoofing and establishes foundational outbound trust, though changes may require up to 24 hours to take effect.
2. Manage sender filters by accessing security settings to configure Blacklist or Whitelist rules by email address, domain, or IP. You can adjust the Anti-spam Level to Strict mode to automatically block non-whitelisted senders or enable permanent deletion of identified spam.
3. Enable S/MIME encryption if your organization uses AI Premium Edition. Navigate to Settings > View more settings > Account and Security > S/MIME Settings, select Import a new certificate, upload your PKCS#12 format (.p12 or .pfx) file, and enter the certificate password. An administrator must first enable S/MIME in the domain management console.

## How to recover access to mailbox login
Account recovery depends on whether you have forgotten credentials, triggered a security lockout, or prefer mobile authentication. Follow the path that matches your situation:
1. Reset forgotten credentials using the Forgot Password interface to initiate self-service recovery. Verify your identity by entering a code sent via SMS to your secure phone number or by correctly answering your pre-configured Security questions, then proceed to reset your password or security settings.
2. Unlock a locked account if your interface displays Too many password errors. Wait 1 hour for the automatic unlock, or contact an administrator with postmaster permissions to manually unlock the account via the Alibaba Mail console under Employee Accounts.
3. Use QR code login by opening the Alibaba Mail app on your mobile device, navigating to the login page, and scanning the Code scanning entry. Complete the authentication before the QR code expires in 5 minutes.

## How to resolve email sending failure issues
Sending failures typically stem from DNS misconfigurations, account status restrictions, or client connection errors. Diagnose and fix the issue using these targeted steps:
1. Fix DNS and authorization errors if you receive SMTP codes like 550 or 554, or messages stating SPF check failed. Verify your SPF and MX records using the Check Domain Name Resolution tool, ensure Send to External Domains is enabled in Employee Account Management, and confirm your password meets security requirements to avoid anti-spam blocks.
2. Restore webmail access if the interface returns a 503 error or shows AccountFrozen, AccountBlocked, or AccountExpired. Verify that your CNAME record correctly points to alimail.aliyun.com, and administrators can restore access by using the Unblock or Enable functions in the console.
3. Correct client configuration when using Outlook, Foxmail, or iPhone Mail. Ensure the username is your full email address, verify that POP is enabled on port 995 and SMTP is configured on port 465, and confirm that Enable POP and Enable IMAP are activated in your mailbox settings.

## How to troubleshoot why an email was not received
Missing inbound emails are usually caused by routing misconfigurations, aggressive spam filtering, or mailbox capacity limits. Resolve delivery gaps by following these checks:
1. Verify inbound routing by confirming that your domain MX record is correctly published and points to the Alibaba Mail servers. Missing or incorrect MX records will prevent external servers from routing messages to your mailbox.
2. Review spam and filter rules to ensure legitimate senders are not blocked by Blacklist rules or caught by Strict anti-spam levels. Check mailbox rules and forwarding configurations that might automatically redirect or delete incoming messages.
3. Check mailbox capacity and sync settings to verify that your mailbox has not reached its storage limit, which can cause new messages to bounce. If you use POP3, ensure that historical emails are not being removed from the server during sync, and verify that IMAP folder synchronization is functioning correctly.

## Frequently Asked Questions

**Q: how do I set up secure email communication**
A: Configure SPF, DKIM, and DMARC records in your DNS settings to authenticate your domain, then adjust Blacklist and Whitelist rules and Anti-spam Levels in the security console. For end-to-end encryption, import a PKCS#12 certificate via S/MIME Settings, which requires AI Premium Edition and administrator enablement.

**Q: what's the best way to secure email**
A: The most effective approach combines foundational DNS authentication with strict filtering. Publishing SPF, DKIM, and DMARC records prevents domain spoofing, while enabling Strict anti-spam mode and managing whitelists blocks unauthorized inbound traffic. S/MIME adds message-level encryption for high-sensitivity communications.

**Q: how do I recover access to mailbox login**
A: Use the Forgot Password interface to verify your identity via SMS to your secure phone number or by answering Security questions. If you have the Alibaba Mail app installed, you can also scan the Code scanning entry on the login page for quick access.

**Q: what's the best way to recover mailbox access**
A: Self-service recovery via SMS or security questions is the fastest method for credential loss. For accounts locked by repeated failed attempts, waiting 1 hour triggers an automatic unlock, or an administrator with postmaster permissions can manually unlock the account through the Alibaba Mail console.

**Q: how do I resolve email sending failure issues**
A: Start by checking for SMTP 550 or 554 errors or SPF check failed messages, then verify your SPF and MX records using the Check Domain Name Resolution tool. Ensure Send to External Domains is enabled, your password meets complexity requirements, and your client uses the full email address with correct ports (995 for POP, 465 for SMTP).

**Q: what's the best way to email sending failed**
A: Diagnose the exact error source first. DNS misconfigurations require updating SPF and MX records, webmail blocks (AccountFrozen or 503 errors) require CNAME verification and console unblocking, and third-party client failures require enabling POP and IMAP and verifying port 995 and port 465 settings with your full email address as the username.

**Q: how do I troubleshoot why an email was not received**
A: Verify that your domain MX record is correctly published to route inbound mail, then review your Blacklist, Whitelist, and Anti-spam Level settings to ensure legitimate messages are not filtered. Finally, check mailbox storage limits and IMAP or POP3 sync rules that might be archiving or deleting incoming messages.

**Q: what's the best way to email not received**
A: The most reliable method is a systematic check of routing, filtering, and storage. Confirm MX record accuracy first, then adjust spam filter thresholds or add trusted senders to your whitelist, and finally ensure your mailbox has sufficient capacity and that sync settings are not removing messages from the server.

## Key terms
- S/MIME is a protocol that enables digital signatures and email encryption using PKCS#12 format certificates.
- SPF record is a DNS entry that specifies which mail servers are authorized to send email on behalf of your domain.
- DKIM is an email authentication method that adds a cryptographic signature to outgoing messages to verify sender identity and message integrity.
- DMARC is a policy framework that tells receiving servers how to handle

Alibaba Mail is available as agent-callable skills via DaaS. Route any question to the best skill with `POST https://company-skill.com/api/route` `{"query": "...", "product": "alimail"}`.

## What you can do

### [Configure communication](https://company-skill.com/p/alimail/alimail-configure-communication.md)

## What You Want to Do

You want to ensure your email communications are secure—either by encrypting message content, verifying sender identity, or preventing unauthorized use of your domain for sending mail.

**Typical User Questions**:
- How to enable S/MIME signing and encryption?
- Can I prevent email spoofing with Alibaba Mail?

## Decision Tree

Pick the best path for your situation:

- **If** you need **end-to-end Email encryption** or **Digital signature** of message content using a **PKCS#12** certificate → Use S/MIME (go to *alimail/alimail-security*)
- **If** you want to block or allow specific senders by email address, domain, or IP using **Blacklist** or **Whitelist**, or adjust **Anti-spam Level** including **Strict** mode or **Permanently delete spam** → Use (go to *alimail/alimail-security*)
- **If** you aim to prevent domain spoofing by publishing **SPF record**, **DKIM**, and **DMARC** policies via **DNS Settings** using **Add Record**, **Record Type**, **Host Record**, and **Record Value** → Use DNSSPF/DKIM/DMARC (go to *alimail/alimail-configuration*)
- **Otherwise (default)** → Start with **DNSSPF/DKIM/DMARC** because missing these records causes delivery failures to Gmail and Yahoo, and it’s foundational for all outbound email trust.

## Path Comparison

| Path | Best For | Complexity | Code Required | Automation | Key Fact | Detail Skill |
|------|----------|------------|---------------|------------|----------|-------------|
| S/MIME | high | No | No | Only available in AI Premium Edition; supports up to 30 certificates per mailbox | `alimail/guide/alimail-security` |
| Console / Dashboard | low | No | No | Free for all users; "Strict" anti-spam level blocks non-whitelisted senders | `alimail/guide/alimail-security` |
| DNSSPF/DKIM/DMARC | medium | No | No | DNS changes may take up to 24 hours to propagate globally | `alimail/guide/alimail-configuration` |

## Path Details

### Path 1: S/MIME

**Brief Description**: This feature allows you to import a PKCS#12 format (.p12 or .pfx) certificate into Alibaba Mail via **S/MIME Settings** to enable **Digital signature** and **Email encryption**. Access it through *Settings > View more settings > Account and Security > S/MIME Settings* and use **Import a new certificate** with your certificate file and password.

**Key technical facts**:
- Billing: S/MIMEAI Premium Edition30

**When to Use**:
- Need to
- OrganizationAI Premium Edition
- Have a valid S/MIME certificate and need to use it in Alibaba Mail

**When NOT to Use**:
- Using Alibaba Mail standard edition (not AI Premium Edition)
- Do not have a valid S/MIME certificate
- Administrator has not enabled S/MIME in the domain management console

**Known Limitations**:
- Only available in AI Premium Edition; standard edition does not support it
- Requires administrator to pre-enable S/MIME in domain management console
- Only supports PKCS#12 format (.p12 or .pfx) certificate files
- Each mailbox can store a maximum of 30 certificates

### Path 2: Console / Dashboard
**Brief Description**: Manage trusted or blocked senders using **Blacklist** and **Whitelist** in the web client or console. You can **Add to Blacklist** or **Add to Whitelist** using full email addresses, domains (e.g., example.com), or IP addresses. Adjust **Anti-spam Level**, including enabling **Strict** mode or choosing to **Permanently delete spam**.

**Key technical facts**:
- Billing: 

**When to Use**:
- Need to control email reception based on specific sender addresses, domains, or IPs
- Want to mark certain senders as trusted (**Whitelist**) or blocked (**Blacklist**)
- Wish to adjust anti-spam filtering strictness

**When NOT to Use**:
- Trying to prevent sender forgery (use SPF/DKIM/DMARC instead)
- Need end-to-end content encryption (use S/MIME instead)

**Known Limitations**:
- Only accepts full email addresses, domains, or IPs—not display names or nicknames
- Enabling **Permanently delete spam** deletes messages irreversibly, risking loss of important mail
- **Strict** anti-spam level only allows mail from whitelisted senders and contacts, potentially blocking legitimate mail

### Path 3: DNSSPF/DKIM/DMARC

**Brief Description**: Add **SPF record**, **DKIM**, and **DMARC** entries in your domain’s DNS to authenticate outgoing mail. Use **Console > Mail > Domain Management > DNS Settings** to **Add Record**, specifying **Record Type**, **Host Record**, and **Record Value** for each policy.

**Key technical facts**:
- Billing: DNS

**When to Use**:
- Need to prevent sender forgery and domain spoofing
- Sending mail to Gmail, Yahoo, or other providers that enforce strict sender authentication
- Have access to your domain’s DNS management console

**When NOT to Use**:
- Lack DNS management permissions for your domain
- Only need simple sender-based filtering (use Blacklist/Whitelist instead)
- Require message-level encryption (use S/MIME instead)

**Known Limitations**:
- DNS changes can take up to 24 hours to propagate globally
- Missing SPF, DKIM, or DMARC causes major providers like Gmail and Yahoo to reject or mark mail as spam
- Requires technical understanding of DNS record syntax and values

## FAQ

Q: Which path should I start with?
A: Start with **DNSSPF/DKIM/DMARC** unless you specifically need message encryption. Without these DNS records, your emails may be rejected by Gmail, Yahoo, and other major providers—even if your content is legitimate.

Q: What if I need to send encrypted emails but chose instead?
A: You’ll only filter incoming mail—you won’t achieve **Email encryption** or **Digital signature**. Recipients can still read, forward, or alter your messages freely.

Q: What if I don’t have AI Premium Edition but try to use S/MIME Settings?
A: The **S/MIME Settings** option won’t appear in your account settings. Even if you have a **PKCS#12** certificate, you cannot **Import a new certificate** without an **AI Premium Edition** subscription.

Q: What happens if I enable Strict Anti-spam Level without adding trusted contacts to Whitelist?
A: Only emails from your **Whitelist** and existing contacts will arrive; all others—including new business partners or newsletters—will be silently blocked.

Q: Can I use SPF/DKIM/DMARC if my domain is managed outside Alibaba Cloud DNS?
A: Yes, as long as you can access your third-party DNS provider’s console to **Add Record** with the correct **Record Type**, **Host Record**, and **Record Value** provided by Alibaba Mail.

Q: If I configure DNS records but skip S/MIME, can someone still read my emails in transit?
A: Yes—SPF/DKIM/DMARC only verify sender authenticity; they do not provide **Email encryption**. For confidentiality, you must use S/MIME with a valid certificate.

Q: What if I add a sender to Blacklist but they spoof a different address?
A: The **Blacklist** won’t block them because it matches only exact addresses or domains. To combat spoofing broadly, you must implement **SPF record**, **DKIM**, and **DMARC** at the DNS level.

### [Recover access](https://company-skill.com/p/alimail/alimail-recover-access.md)

## What You Want to Do

You need to regain access to your Alibaba Mail account but are blocked due to forgotten credentials, temporary lockout, or authentication challenges. You want the fastest, most reliable method based on your current account state and available recovery options.

**Typical User Questions**:
- How do I reset my password if I forgot it?
- My account is locked after too many failed attempts — how to unlock?
- Can't log in due to two-factor verification failure

## Decision Tree

Pick the best path for your situation:

- **If** you completely forgot your password **and** cannot answer your security questions → Use **** (go to *alimail/alimail-security*)
- **If** your account shows "Too many password errors" and is temporarily locked → Use **** (go to *alimail/alimail-account*)
- **If** you have the **Alibaba Mail app** installed, logged in, and see a **Code scanning entry** on the login page → Use **** (go to *alimail/alimail-account*)
- **Otherwise (default)** → Start with ****, as it’s the most common self-service recovery path for credential loss (assuming you have a secure phone number or security questions set up).

## Path Comparison

| Path | Best For | Complexity | Code Required | Automation | Key Fact | Detail Skill |
|------|----------|------------|---------------|------------|----------|-------------|
| Console / Dashboard | low | No | No | Requires a secure phone number or pre-configured security questions | `alimail/troubleshooting/alimail-security` |
| Console / Dashboard | low | No | No | Locked due to "Too many password errors"; requires admin or 1-hour wait | `alimail/troubleshooting/alimail-account` |
| Console / Dashboard | low | No | No | QR code expires in 5 minutes; requires Alibaba Mail app | `alimail/guide/alimail-account` |

## Path Details

### Path 1: Console / Dashboard
**Brief Description**: This is a self-service flow that lets you regain access using either SMS verification sent to your **secure phone number** or by correctly answering your **Security questions**. It uses the **Forgot Password** interface, triggers **Send SMS**, validates the **Verification Code**, and allows you to **Reset Security Settings** if needed.

**Key technical facts**:
- Auth method: SMS verification code or security question answers

### Path 2: Console / Dashboard
**Brief Description**: This path addresses accounts locked due to **Too many password errors**. Recovery is either automatic after 1 hour or immediate via an administrator using the **Alibaba Mail console** under **Employee Accounts**. Only users with **postmaster** permissions can perform manual unlocks.

**Key technical facts**:
- Auth method: Administrator console access
- Prerequisites: Postmaster or equivalent administrative permissions, Access to Alibaba Mail console at https://mail.console.aliyun.com

**When to Use**:
- Alibaba Mail

### Path 3: Console / Dashboard
**Brief Description**: This method enables passwordless login by scanning a **QR code** displayed on the web login page using the **Alibaba Mail app**. The **Code scanning entry** appears during login, and the **QR code** is valid for only **5 minutes**. You must already be logged into the **Alibaba Mail app** on your mobile device.

**Key technical facts**:
- Auth method: QR code scan via mobile app
- Prerequisites: Alibaba Mail app installed and updated on mobile device, Logged into the Alibaba Mail app on mobile device

**When to Use**:
- Alibaba Mail

**When NOT to Use**:
- Alibaba Mail
- Alibaba Mail

- Alibaba Mail

## FAQ

Q: Which path should I start with?  
A: If you forgot your password but have a **secure phone number** or remember your **Security questions**, start with ****. If you’re seeing a lockout message due to **Too many password errors**, use the unlock path. If you’re on a regular device and have the **Alibaba Mail app**, try **Scan code to log in**.

Q: What if I don’t have a secure phone number or security questions set up but used the “” path? 
A: You’ll hit a dead end — the system won’t let you proceed, and you’ll be forced to contact an administrator or submit a support ticket, as stated in the limitations.

Q: What if my account is locked due to Too many password errors, but I try to use the QR code login instead?  
A: You’ll likely fail — the **Scan code to log in** method assumes your account is in a normal state. If the backend has flagged your account as locked, even QR authentication may be blocked until the lock is lifted.

Q: Can I use the Alibaba Mail console to reset my own password if I’m not an admin?  
A: No. The **Alibaba Mail console** under **Employee Accounts** is only accessible to users with **postmaster** permissions. Regular users must use self-service flows like **Forgot Password** with **Send SMS** or **Security questions**.

Q: What happens if I scan the QR code after 5 minutes?  
A: The **QR code** expires after **5 minutes** for security. You’ll need to refresh the login page to generate a new code and scan again via the **Code scanning entry**.

Q: Is there any way to recover my account if I lost access to my secure phone number and forgot security answers?  
A: Not through self-service. You must contact your organization’s email administrator to either verify your identity manually or reset your account via the **Alibaba Mail console**.

### [Resolve failure](https://company-skill.com/p/alimail/alimail-resolve-failure.md)

## What You Want to Do

You're trying to send an email from your Alibaba Mail account but are encountering errors—either in the web interface, a third-party client like Outlook, or due to server-side delivery rejections. You need to identify the root cause and apply the correct fix.

**Typical User Questions**:
- Why can't I send emails to external domains?
- Getting 'not authorized to send' error — how to fix?
- SPF record causing email bounce — what to do?

## Decision Tree

Pick the best path for your situation:

- **If** you receive explicit SMTP error codes like `550` or `554`, or messages mentioning **SPF record**, **MX record**, **auditor rejection**, or **Send to External Domains disabled** → Use **SPF/MX/** (go to *alimail/alimail-email-delivery*)
- **If** the Alibaba Mail web interface (`mail.domain.com`) fails to load, shows **AccountFrozen**, **AccountBlocked**, **AccountExpired**, or returns a **503 error** → Use **** (go to *alimail/alimail-service*)
- **If** you’re using **Outlook**, **Foxmail**, or **iPhone Mail** and get password errors, connection failures, or need **POP/IMAP** server settings (**pop.mail.aliyun.com**, **port 995**, **port 465**) → Use **POP/IMAP** (go to *alimail/alimail-configuration*)
- **Otherwise (default)** → Start with **SPF/MX/**, as most external sending failures stem from DNS or authorization misconfigurations.

## Path Comparison

| Path | Best For | Complexity | Code Required | Automation | Key Fact | Detail Skill |
|------|----------|------------|---------------|------------|----------|-------------|
| SPF/MX/ | DNS | medium | No | No | Requires admin access to modify **Employee Accounts** and **Check Domain Name Resolution** | `alimail/troubleshooting/alimail-email-delivery` |
| Webmail | low | No | No | Depends on **CNAME record** pointing to **alimail.aliyun.com**; account status managed via **Unblock**/**Enable** | `alimail/troubleshooting/alimail-service` |
| POP/IMAP | low | No | No | Username must be **full email address**; requires **Enable POP**/**Enable IMAP** in settings | `alimail/guide/alimail-configuration` |

## Path Details

### Path 1: SPF/MX/

**Best For**: DNS

**Brief Description**: This path addresses email delivery failures caused by misconfigured **SPF record** or **MX record**, disabled **Send to External Domains** permission, **weak password** triggering anti-spam policies, or content-based **auditor rejection**. It involves using **Check Domain Name Resolution** and **Employee Account Management** tools to verify and correct settings.

**Key technical facts**:  
*(All technical capability fields are null — not applicable for troubleshooting guides)*

**When to Use**:
- Error message contains `'550 failed to meet SPF requirements'` or `'SPF check failed'`
- System reports `'Permission for sending emails to external domains is disabled'`
- Recipient server returns `'auditor does not approve to send this email'`

**When NOT to Use**:
- Issue occurs only in webmail UI (e.g., send button unresponsive)
- Problem appears exclusively in Outlook/Foxmail clients
- Cannot access `mail.domain.com` at all

**Known Limitations**:
- Only applies to enterprise Alibaba Mail accounts (not free personal mailboxes)
- Cannot resolve recipient-side anti-spam blocks (e.g., 552/553 errors)
- DNS changes take **5–60 minutes** to propagate globally

### Path 2: Console / Dashboard
**Best For**: Webmail

**Brief Description**: This path resolves issues where the Alibaba Mail web interface fails to function due to account status (**AccountFrozen**, **AccountBlocked**, **AccountExpired**, **AccountDisabled**) or DNS misconfiguration. It requires verifying that a **CNAME record** correctly points to **alimail.aliyun.com** and using admin controls like **Unblock** or **Enable** in **Employee Accounts**.

**Key technical facts**:  
*(All technical capability fields are null — not applicable for troubleshooting guides)*

**When to Use**:
- Webmail shows `'AccountFrozen'`, `'AccountBlocked'`, or `'AccountExpired'`
- Browser cannot load `mail.domain.com`
- Inbox appears empty with a **503 error**

**When NOT to Use**:
- Errors reference **SPF record**, **MX record**, or SMTP codes like **550**/**554**
- Issue only occurs in third-party email clients
- Need to configure **POP/IMAP** protocols

**Known Limitations**:
- Regular users cannot **Unblock** or **Enable** their own accounts—requires postmaster admin rights
- **CNAME record** updates may take up to **24 hours** for global DNS propagation
- During service outages (**503 error**), historical email metadata is only accessible via list avatars

### Path 3: POP/IMAP

**Brief Description**: This path provides setup guidance for connecting **Outlook**, **Foxmail**, or mobile mail apps to Alibaba Mail using **POP/IMAP**. It emphasizes enabling **Enable POP** or **Enable IMAP** in settings and using the **full email address** as the username. Server details include **pop.mail.aliyun.com** with **SSL/TLS** on **port 995** (IMAP) or **port 465** (SMTP).

**Key technical facts**:  
*(All technical capability fields are null — not applicable for configuration guides)*

**When to Use**:
- Third-party client rejects password despite correct credentials
- Need official **POP3/IMAP/SMTP** server addresses and ports
- Client fails to connect to Alibaba Mail servers

**When NOT to Use**:
- Error involves **550**/**554**, **SPF record**, or delivery rejection
- Webmail send button is broken or account is frozen
- Cannot reach `mail.domain.com`

**Known Limitations**:
- **POP/IMAP** must first be enabled in the webmail **Settings > POP/IMAP** panel
- Using only the local part of the email (e.g., `user` instead of `user@domain.com`) causes authentication failure
- Does not address server-side delivery or web interface issues

## FAQ

Q: Which path should I start with?  
A: Begin with **SPF/MX/** if you’re sending to external domains and see delivery errors (e.g., **550**, **554**). If you can’t even log in or the web UI is broken, use ****. If only your email app fails, choose **POP/IMAP**.

Q: What if I get a **550 SPF check failed** error but try to fix my Outlook settings?  
A: You’ll waste time reconfiguring **POP/IMAP** or **port 465**, but the real issue is a missing or incorrect **SPF record** in your DNS—only the **SPF/MX/** path addresses this.

Q: What if my account is **AccountFrozen** but I follow the **POP/IMAP** setup guide?  
A: Even with perfect client settings (**full email address**, **SSL/TLS**, **port 995**), you won’t send mail because the account is disabled server-side—you must use **** and have an admin **Unblock** it via **Employee Accounts**.

Q: Can I skip DNS checks if I’m only emailing within my company?  
A: Possibly—but if you ever send externally, **Send to External Domains** must be enabled, and **SPF record** validation still applies. Internal-only users rarely see **554** or **auditor rejection**, so DNS may not be the culprit.

Q: Why does my password work on the web but not in Outlook?  
A: You likely didn’t enable **Enable POP** or **Enable IMAP** in web settings, or you used a partial username. The **POP/IMAP** path requires both steps—web login uses different auth flows.

Q: How long after fixing a **CNAME record** will `mail.domain.com` work?  
A: While **SPF/MX** changes take 5–60 minutes, **CNAME record** updates for **alimail.aliyun.com** can take up to **24 hours** globally—don’t assume immediate resolution.

### [Troubleshoot received](https://company-skill.com/p/alimail/alimail-troubleshoot-received.md)

## What You Want to Do

You or someone else sent an email, but it never appeared in the recipient’s inbox. You need to determine whether the issue stems from local mailbox settings, external delivery failures (like DNS misconfiguration), or security filtering (e.g., anti-spam systems).

**Typical User Questions**:
- Why didn't I receive an email that was sent to me?
- Email shows as sent but never arrived — how to debug?

## Decision Tree

Pick the best path for your situation:

- **If** you can log in to WebMail but the email is missing from all folders → Use **** (go to *alimail/alimail-email*)
- **If** the sender received a bounce message with error codes like **550 failed to meet SPF requirements** or **554 Reject by behaviour spam** → Use **MX/SPF/** (go to *alimail/alimail-email-delivery*)
- **If** you suspect the email was marked as spam or see an **ESO_LOCAL_SPAM** error → Use **** (go to *alimail/alimail-security*)
- **Otherwise (default)** → Start with ****, as most user-reported "missing email" cases involve local settings like **Deletion by Receiving Software**, **Receiving Rules**, or hitting the **10GB capacity limit**.

## Path Comparison

| Path | Best For | Complexity | Code Required | Automation | Key Fact | Detail Skill |
|------|----------|------------|---------------|------------|----------|-------------|
| Console / Dashboard | low | No | No | Free accounts have a hard **10GB capacity limit**; exceeding it blocks new mail | `alimail/troubleshooting/alimail-email` |
| MX/SPF/ | medium | No | No | **MX records** must be exactly `mx1.imm.aliyun.com` (priority 10) and `mx2.imm.aliyun.com` (priority 20) | `alimail/troubleshooting/alimail-email-delivery` |
| Console / Dashboard | low | No | No | Interception with **ESO_LOCAL_SPAM** requires submitting a **.eml file** for manual review | `alimail/troubleshooting/alimail-security` |

## Path Details

### Path 1: Console / Dashboard
**Brief Description**: This path diagnoses issues within the user’s own mailbox, such as emails removed by **Deletion by Receiving Software** (common with POP3), missing **Save to Sent Email** visibility in WebMail, automatic sorting via **Receiving Rules**, or hitting the **10GB capacity limit**. Key settings are found under **Email Settings** > **POP Settings** and monitored via the **Storage indicator**.

**Key technical facts**:  
*(All fields null in fact_card — no runtime, billing, or scaling data applicable)*

**When NOT to Use**:
- alimail-email-delivery
- alimail-security

### Path 2: MX/SPF/

**Brief Description**: This path addresses delivery failures caused by incorrect DNS configuration or policy restrictions. It involves verifying **MX records**, ensuring a valid **SPF TXT record** that includes `include:aliyun-inc.com`, checking **Send to External Domains** permissions in **Employee Account Management**, and using **Check Domain Name Resolution** tools. Common errors include **550 failed to meet SPF requirements** and **554 Reject by behaviour spam** due to weak passwords.

**Key technical facts**:  
*(All fields null in fact_card — no runtime, billing, or scaling data applicable)*

**When NOT to Use**:
- alimail-email
- alimail-security

**Known Limitations**:
- SPFinclude:aliyun-inc.comSPF
- MXmx1.imm.aliyun.com(10)mx2.imm.aliyun.com(20)

### Path 3: Console / Dashboard
**Brief Description**: This path focuses on anti-spam filtering. If a message triggers the **ESO_LOCAL_SPAM** error, it’s blocked by Alibaba Mail’s security layer. Users can review **Account and Security** settings, manage **Whitelist**/**Blacklist**, and respond to **Unusual logon notifications**. Legitimate emails require submission of the original **.eml file** for appeal, as automated release isn’t possible.

**Key technical facts**:  
*(All fields null in fact_card — no runtime, billing, or scaling data applicable)*

**When NOT to Use**:
- alimail-email-delivery
- alimail-email
- MXSPF DNS

## FAQ

Q: Which path should I start with?  
A: Start with **** if you can log in and don’t see bounce messages — most missing-email reports stem from **Receiving Rules**, **POP Settings**, or the **10GB capacity limit**.

Q: What if my mailbox hit the **10GB capacity limit** but I used the **** path? 
A: You’ll waste time checking **MX records** and **SPF TXT record** when the real issue is local storage — new emails are rejected silently once the **Storage indicator** hits 10GB.

Q: What if I received an **ESO_LOCAL_SPAM** error but chose the **** path? 
A: You won’t find the email anywhere in your folders because it was never delivered — the **alimail-email** path can’t recover messages blocked by the anti-spam system.

Q: Can I fix a **550 failed to meet SPF requirements** error using the security path?  
A: No — **550 SPF errors** originate from missing or invalid **SPF TXT record** in DNS, which is handled only in the **alimail-email-delivery** path via **Check Domain Name Resolution**.

Q: Why do I need a **.eml file** to appeal a spam block?  
A: Alibaba Mail’s anti-spam system requires the full original message headers and content (in **.eml file** format) to verify legitimacy — this is mandatory for **ESO_LOCAL_SPAM** cases.

Q: Does enabling **Save to Sent Email** prevent missing sent messages?  
A: Yes — by default, emails sent via clients aren’t saved to WebMail’s sent folder; enabling this in **Email Settings** ensures visibility across devices.


## Frequently asked questions

### When should I use the console vs. troubleshoot via DNS/email protocols?

Use the **guide skills** for UI-based tasks (e.g., setting up forwarding or changing your password). Use **troubleshooting skills** when you encounter delivery errors, login blocks, or configuration issues that require diagnostic steps (e.g., checking SPF records or mailbox capacity).

### How do I recover my account if I’m locked out?

Start with the intent skill **“Recover access to mailbox login”**. This covers password resets, unlocking disabled accounts, and resolving 2FA failures.

### Why are my emails being marked as spam?

This is typically due to missing or incorrect SPF/DKIM/DMARC records. Use the **Email Delivery troubleshooting skill** to validate DNS settings and request delisting if needed.

### Can I access my email on mobile or desktop clients?

Yes. Use the **Email Configuration guide skill** to set up IMAP/POP on Outlook, Foxmail, or iPhone. Ensure “Save sent emails to webmail” is enabled if you want client-sent messages visible online.

### How do I prevent emails from disappearing after using POP3?

By default, POP3 deletes messages from the server after download. In your email client settings, enable “Leave a copy on the server.” For existing issues, see the **Email Management troubleshooting skill**.

### How do I set up secure email communication?

You can set up secure email communication by enabling S/MIME certificates, digital signatures, and encrypted transmission. These security features are configured through the platform's dedicated communication and security settings.

### How do I recover access to my mailbox login?

You can recover access to your mailbox login by unlocking disabled accounts, resetting your password, or resolving two-factor authentication blocks. These recovery options are managed through the account management and security troubleshooting sections.

### How do I resolve email sending failure issues?

You can resolve email sending failures by addressing outbound rejections, authorization errors, or delivery issues caused by DNS misconfigurations, blacklists, or size limits. The troubleshooting tools guide you through diagnosing and fixing these specific delivery problems.

### How do I troubleshoot why an email was not received?

You can troubleshoot why an email was not received by diagnosing missing or undelivered inbound messages through the platform's diagnostic tools. Common causes include spam filtering, mailbox capacity limits, or synchronization issues after POP3 retrieval.

## Cross-product integrations

- [Complete Domain Email Infrastructure Setup](https://company-skill.com/p/_combos/complete-domain-email-infrastructure-setup-d5499a.md) (clerk + resend + rds)
- [Complete Email Troubleshooting and Deliverability Workflow](https://company-skill.com/p/_combos/complete-email-troubleshooting-and-deliverabilit-86f20e.md) (resend)
- [Domain Email Authentication Setup](https://company-skill.com/p/_combos/domain-email-authentication-setup-b2438b.md) (resend)
- [Email Domain Lifecycle: Setup to Troubleshooting](https://company-skill.com/p/_combos/email-domain-lifecycle-setup-to-troubleshooting-741deb.md) (resend)
- [Email Sending and Deliverability Troubleshooting](https://company-skill.com/p/_combos/email-sending-and-deliverability-troubleshooting-8ed1e4.md) (resend)
- [Fix Email Sending and Improve Deliverability](https://company-skill.com/p/_combos/fix-email-sending-and-improve-deliverability-5d0546.md) (resend)
- [Full Email Domain Setup and Delivery Troubleshooting](https://company-skill.com/p/_combos/full-email-domain-setup-and-delivery-troubleshoo-f57f9c.md) (resend)
- [Full Email Infrastructure Setup and Deliverability](https://company-skill.com/p/_combos/full-email-infrastructure-setup-and-deliverabili-9a1d9c.md) (resend)

## Use with an AI agent

```bash
curl -s https://company-skill.com/api/route \
  -H 'Content-Type: application/json' \
  -d '{"query": "...", "product": "alimail"}'
```

MCP server: https://company-skill.com/api/mcp/alimail.py

---
Machine-readable: https://company-skill.com/llms.txt · https://company-skill.com/sitemap.xml