can't send email to workmail

Question

Hello,
I've configured amazon workmail for my domain and created an address. With this address, i can access the mailbox and send email from it. But when i try to send an email to this address, I don't get the mail. I get this error:
2/14/2024 12:22:34 PM - Server at mydomain.com (0.0.0.0) returned '450 4.4.312 DNS query failed [Message=ServerFailure] [LastAttemptedServerName=er-tp.com] [EDE=9 (DNSKEY Missing): (validation failure : No DNSKEY record from ip for key mydomain.com. while building chain of trust)] [DB8EUR05FT015.eop-eur05.prod.protection.outlook.com 2024-02-14T12:22:46.536Z 08DC2CFF2D5C9176](ServerFailure)'
When i look at the configuration in aws for the domain in workmail, i have 4 sections, three are greens (Domain ownership, Workmail configuration and improved security), and the last one (improved email delivery) is in orange warning with this message:
Missing MAIL FROM domain
It is recommended to setup your own MAIL FROM if you have enabled DMARC for your domain. Go to Amazon SES to configure a custom MAIL FROM domain.

but i don't want SES, so i don't know if this is a problem.
Can someone help me ?

Answer

Hi,

AWS WorkMail uses SES to send and receive email for your organization. So you will automatically use SES but you will not incur any cost for this. This does mean that some domain management happens via SES. This includes a recipient configuration to tell where to deliver the mail.

I checked your organization and its missing some important domain records. The DKIM and custom Mail from are important records for you to deliver email to others.

Also it seems you have removed the recipient rule in SES to inform it to deliver mail to your WorkMail organization. For this you can add your domain in WorkMail again to fix this. (No need to remove the domain first).

Kind regards,
Robin

can't send email to workmail

Relevanter Inhalt