Skip to main content
.com domains from $2.99 — free WHOIS privacy on every name

Engineering Glossary · Mailbox Ops

Email forwarder — Forwarders: Cheap to Run, Expensive for Deliverability

Everything forwarded to an external mailbox arrives with your server's IP on the envelope and someone else's domain in the From line, which is exactly what a filter is trained to distrust.

The short answer

An email forwarder relays mail arriving at one address on to another, with no second mailbox and no extra password issued — which is the cheapest possible way to run role addresses like info@ and sales@.

The cost is not storage, it is authentication. When your server relays a message onward, it becomes the connecting host at the destination, so the original sender's SPF record no longer matches the IP that turned up. DKIM usually survives, because the signature travels inside the message, which is why some forwarded mail sails through and some is filed as junk with no obvious pattern until you read the headers.

By the HostingFast team · Reviewed 24 August 2026

100+

Terms in the glossary

2 min

Average read time

Plain

English throughout

24/7

Humans if you get stuck

Addresses like info@ and sales@, plus any you have retired, land in the inboxes of whoever answers them. The forwarding address stores nothing itself unless you also give it a mailbox, and when duties change hands you edit one line rather than migrating anybody's history.

Two rough edges are worth knowing about before you rely on it. Forwarded mail sent on to an external provider can be judged harshly by their filtering, and two addresses pointed at one another will loop until something intervenes.

What the destination server actually sees

It sees a connection from your IP address carrying a message whose From header says someone else's domain. It runs SPF against your IP and that sender's record, and the check fails, because your server was never listed there and never could be. That is not a misconfiguration on either side; it is the arithmetic of forwarding.

DKIM is the difference between arriving and vanishing. If the original sender signed the message and nothing along the way modified it, the signature still verifies and DMARC can pass on DKIM alignment alone. If they did not sign, or a footer was appended en route, both checks are now failing and the destination filter is left with reputation as its only evidence. Sender Rewriting Scheme rewrites the envelope sender so SPF is evaluated against a domain you do control, which is the standard mitigation where a mail platform offers it.

Loops, and how to spot one before the bounce

The classic loop is two addresses forwarding to each other, often created months apart by two different people. Mail servers cap the number of Received headers a message may accumulate and bounce it when it exceeds them, so the symptom is a bounce mentioning a hop count rather than anything about loops.

Read the Received chain on the bounced message and the loop is obvious: the same two hostnames alternating down the page. Before creating any forwarder, check whether the destination itself forwards anywhere — one query that prevents the whole class of fault.

When an alias should stop being an alias

Three signals mean it is time to give the address its own mailbox. It needs to reply as itself rather than from someone's personal address. It needs a history that survives the person currently answering it. Or more than one person needs to see the same thread without a forwarding fan-out that multiplies every message.

Everything else is better as a forwarder. Roles get routed, people get a box — and a retired address kept alive as a forwarder costs nothing beyond the line it occupies in the panel.

Where this lands on HostingFast

Forwarders, mailboxes and the routing between them are all managed from the same screen in the panel, and mailboxes on your own domain are included with the plan rather than sold back to you at checkout. The rate you sign up at is the rate you renew at, so year two costs exactly what year one did.

Read next: Catch-All Email, Spam Filter, Autoresponder and SPF — the last of which explains most of what happens to a forwarded message.

Working through an inbox that carries its own domain name

A hundred terms, each with the mechanism

To us, jargon nobody explained is a service defect. This glossary is the support team's collected translations — published with the headers, the failure modes and the numbers still in them.

Order an annual plan and the first year of your domain registration costs you nothing.

  • 100+ entries, each with the mechanism spelled out
  • Commands you can paste, numbers you can compare against
  • Neighbouring terms wired together at the foot of every page
  • Written by the engineers who answer the tickets

Why HostingFast

Standard on every plan

The second-order cost named

A forwarder is free to run and expensive to authenticate. Entries here say where the real cost lands.

Headers as evidence

The Received chain and Authentication-Results explain a filtered message; guesswork does not.

Mechanism, not vocabulary

What the destination server sees, since that is what decides whether your mail is trusted.

The decision rule stated

Where two options both work, the entry gives you the signal that picks between them rather than a shrug.

Wired to its neighbours

Email Forwarder runs into Catch-All Email, Spam Filter and SPF — the terms that finish the explanation.

This term, landed

Forwarders defined, their authentication cost measured and their failure modes named — enough to route properly.

Quick Start

From order to online

  1. 1

    Check the destination before you create the route

    If the target address itself forwards somewhere, you are one edit from a loop. One query now avoids a bounce report later.

  2. 2

    Send a test and read the headers at the far end

    Look at Authentication-Results on the forwarded copy. spf=fail with dkim=pass is the normal, survivable outcome; both failing is the one to act on.

  3. 3

    Promote the alias when it needs to reply as itself

    Own history, own From address, or more than one reader — any of the three means a mailbox rather than a forwarder.

Built In

Loaded onto every plan

  • Mailboxes on your own domain, included with the plan
  • Spam and virus scanning on every mailbox by default
  • Browser webmail plus IMAP, POP and SMTP for any mail client
  • cPanel's DNS Zone Editor, not a fixed set of preset records
  • Softaculous on board for one-click application installs
  • Upgrades applied in place — changing plan is not a migration
  • Free SSL on every plan, renewed automatically before it can lapse
  • A renewal price identical to the one you signed up at
  • Your existing site moved over by our engineers, free of charge
  • WebP image conversion built in, at no extra cost

Frequently Asked

What people ask us most often

Why does forwarding break SPF at the destination?

Because SPF authenticates the server that connected, and after a forward that server is yours rather than the original sender's. Their record does not list your IP and never will. The message is not being rejected for anything you did wrong; the check is behaving exactly as designed. DKIM is what carries authentication through the hop, and Sender Rewriting Scheme is the standard mitigation where a platform offers it.

How do I spot a forwarding loop?

Read the Received chain on the bounce. A loop shows as the same two hostnames alternating down the page, and the bounce itself usually cites a hop count rather than the word loop. It happens when two addresses forward to each other, typically created months apart by different people, so the preventive check is simply asking whether the destination forwards anywhere before you point anything at it.

When should an alias be given a mailbox of its own instead?

When it needs to reply under its own name, when it needs a history that outlives the person currently answering it, or when more than one person has to see the same thread. Any one of those three is enough. Everything else stays a forwarder, because a forwarder costs nothing to keep and one line to change.

What does year two cost?

The same as year one. The rate you order at is the rate you renew at, every year. There is no introductory teaser pricing here, so there is no year-two jump waiting in the invoice — the hosting line stays a fixed number your accounts can plan around.

Keep reading

  • Webmail

    The mailbox in a browser, and the fastest way to prove whether a forwarded message ever arrived.

  • Autoresponder

    Automatic replies, their per-sender interval, and the loop that interval exists to prevent.

  • How to Create an Email Forwarder

    Creating a forwarder, and the destination check that stops it becoming a loop.

  • Secure Hosting

    Imunify360, isolated accounts and hardened defaults for security-first builds.

  • VPS Hosting

    KVM virtual servers — root access, DDoS filtering and one flat monthly price.

Changing hosts? Run through our checklist first.

A straightforward sequence for a switch your visitors never feel: which files move first, how to shift email across without losing a single message, the right moment to repoint DNS, and the two mistakes behind almost all the downtime we get asked to rescue.

You'll get the checklist email, then occasional pointers on keeping a site running fast. Unsubscribe the moment you want out — the privacy policy covers the rest.

Route it properly the first time.

Mailboxes and forwarders included with every plan, full DNS control in the panel, and renewals at the rate you signed up at.

View Secure Hosting plans