This guide assumes email bounce handling is already deployed and passing. It covers what breaks at scale and how mature teams operate it.
Edge cases that break a working setup#
- Treating 'mailbox full' as a hard bounce and losing valid contacts.
- Ignoring 'blocked by policy' bounces that signal a blocklist or DMARC failure.
- Mail forwarded through mailing lists or personal forwarders, which alters headers and content.
- Acquisitions and rebrands that introduce domains nobody audited.
- Vendors silently changing their sending infrastructure.
Operating it as infrastructure#
- Assign an owner for each sending domain and each vendor relationship.
- Put DNS records under version control or a change-review process.
- Alert on authentication pass rate drops and reputation changes, not just outages.
- Run a quarterly audit against the setup steps below.
- Document runbooks for the three most common failures.
Reference: the baseline setup#
- Parse DSN codes: 5.1.x means the address does not exist (hard); 4.x.x means temporary (soft).
- Suppress hard bounces after one failure and soft bounces after three.
- Route bounce notifications to a monitored mailbox or webhook.
- Review bounce reasons weekly for patterns like 'blocked' that indicate reputation issues.
Frequently asked questions#
What is the difference between a hard and soft bounce?
Hard bounces are permanent failures (bad address). Soft bounces are temporary (full mailbox, server down). Suppress hard immediately.