Improved spam filtering: avoiding email forwarding services

Rob Mueller – 5 May 2009

In a recent blog post, I mentioned that one of the ways to improve spam filtering is to avoid using a forwarding service, and especially if you have your own domain, to point the MX records for your domain directly to our servers (Enhanced or family/business accounts only).

The reason for this is that FastMail does a lot of work at the SMTP stage (when email is transferred from an external system to FastMail) to try and identify spam bots and block them while letting legitimate through. Unfortunately many of these processes can only work when the MX records for your domain point directly to our servers. If you point the MX records to another system, and forward from that system to FastMail, we can't do the spam bot detection, and so more spam will get through.

To give you an idea of how effective this is, one of our users - the author, Simon Cann ( - recently changed over the MX records for his Noise Sculpture domain ( to point to us instead of using a forwarding service. After doing so, he had the following to say:

As you suggested, I pointed the MX records for the Noise Sculpture domain at Fastmail and have been blown away by the results.  I'm now getting maybe three or four pieces of spam in a day and the few pieces of spam that are getting through are being correctly identified as spam and put in the Junk Mail folder.

Simon went on to explain why he hadn't made the change sooner.

I came to Fastmail a year ago following an unexpected and highly inconvenient melt down of my web host who was also by default my email host for my domain.  This was embarrassing and potentially lost me business (I was in the middle of pitching a book proposal to a group of literary agents).

On signing up with Fastmail I immediately pointed the MX record at Fastmail.  My other website for my music-related books (Noise Sculpture) was hosted by a different web host and so I forwarded all of my email from that domain to Fastmail.  I didn't see a need to change the MX record--the web host was working well (still is) and I couldn't be bothered to start hacking the DNS records.

Long story short, as the and emails were sent to a single Fastmail account, I hadn't realized how much spam was getting killed by Fastmail.  However, now that I have changed the MX record for, I can see just how much spam was getting through from that domain because I was using forwarding rather than pointing the MX records.

This change has stunned me (in a very good way).  I'm so impressed with the change (allied with your excellent service) that I've just renewed my Fastmail subscription to cover the next few years.

For the technically interested, the main things we do at the SMTP delivery stage to detect these spam bots are: