Sender reputation for a brand-new VPS IP — the warm-up strategy that actually works

A new VPS IP starts with no sender reputation. Whether the mail you send is delivered, spam-foldered, or rejected depends on how the first few weeks of traffic look to the major receivers. This article covers the warm-up strategy that builds reputation without tripping spam filters.

Why reputation matters more than authentication

SPF, DKIM, and DMARC tell receivers "this mail is legitimately from this domain." They don't tell receivers "this sender is trustworthy." Reputation does that. A new IP with perfect authentication but no history still gets distrusted because nobody has any data on it.

Receivers (Gmail, Outlook, Apple, the rest) maintain reputation scores based on:

• Volume sent — sudden spikes look like spam campaigns.
• Bounce rate — high bounces mean dirty lists.
• Spam complaint rate — direct signal.
• Engagement signals — opens, replies, "not spam" clicks.
• Authentication consistency.
• Stability over time.

The warm-up principle

Ramp slowly. Start with low daily volume to engaged recipients you know want your mail. Increase week by week. Watch the metrics. Stop increasing if reputation degrades.

Week-by-week plan

Week 0 — Preparation

• Set up Postfix + Dovecot or Mailcow with everything passing SPF/DKIM/DMARC. See Postfix + Dovecot or Mailcow.
• Confirm rDNS points to your mail hostname.
• Confirm DMARC reports are being received (sets up feedback loop).
• Sign up for Google Postmaster Tools and Microsoft SNDS.

Week 1 — Friends and family (literally)

• Send to 20-50 recipients you know personally.
• Ask them to mark as "Not spam" if it lands in spam.
• Ask them to reply (real replies are reputation gold).
• Volume: 20-50 messages/day.

Week 2 — Highly engaged opt-ins

• If you have a customer list, send only to those who've opened mail recently (last 30 days).
• Personal transactional mail (password resets, confirmations) goes here too.
• Volume: 100-200 messages/day.

Week 3 — Broader transactional

• Add transactional mail to all active users.
• Volume: 500-1000 messages/day.

Week 4 — Begin marketing-style sends

• If you do marketing emails, start with your most engaged segments.
• Volume: 2000-5000 messages/day.

Week 5+ — Continued ramp

• Double weekly if reputation metrics stay clean.
• Hold or back off if you see bounce rate > 2%, spam complaint rate > 0.1%, or sudden drops in delivery to Gmail/Outlook inboxes.

What to monitor

Google Postmaster Tools

• postmaster.google.com
• Add your sending domain.
• Shows: IP reputation, domain reputation, spam rate, authentication results, delivery errors.
• "Reputation: Bad" or "Low" tells you to slow down.

Microsoft SNDS

• sendersupport.olc.protection.outlook.com
• Register your IP space.
• Daily reports show your filter result distribution.

DMARC aggregate reports

See Reading DMARC reports. Look for:

• Pass rate trending up over time = good warming.
• Sudden pass-rate drops = check authentication.

Bounce log

grep -i "bounce\|deferred\|rejected" /var/log/mail.log | tail -50

Look for patterns. Rejection messages often include the reason (low reputation, content suspicious, recipient blocked).

Things that wreck a warming IP

• Sending to old / inactive lists. High bounce rate is a death sentence for new-IP reputation. Validate your list before sending.
• Sudden 10x volume spike. Even legitimate traffic looks like spam if you go from 50/day to 500/day overnight.
• Spam complaints. 0.1% complaint rate is the rough threshold beyond which receivers throttle you.
• Mismatched From and From-header domains. Subtle authentication misalignment looks like spoofing.
• Spam-trigger content. All-caps subject, spammy phrases, image-only emails. Use plain language; avoid the obvious red flags.

Things that build reputation faster

• Replies. Real conversation is the strongest engagement signal.
• Recipients adding your address to their contacts.
• Forwarding (some receivers count this).
• Consistency over time — sending at predictable cadence and volume.
• Clean list hygiene — proactively removing addresses that bounce or never engage.

If reputation gets worse, not better

• Stop sending non-essential mail. Drop to transactional-only.
• Check Spam complaint rate via Postmaster Tools — investigate what content/recipients triggered.
• Confirm SPF/DKIM/DMARC are passing on every send.
• Check your IP against blocklists (see Your IP got blacklisted).
• Wait a few days, then resume warming at the previous successful level.

When warming a new IP isn't worth it

If you only send a few transactional emails per month, warming an IP is overkill. Just relay through a service:

• Mailgun, Postmark, Amazon SES — pre-warmed shared IPs, excellent deliverability, low cost for low volume.
• Your VPS IP never touches the recipient MX.
• You get a managed-reputation experience for the cost of the SaaS fee.

This is the right answer for many small operations. Only warm your own IP if (a) volume is high enough to justify the work, or (b) you specifically need direct-MX delivery for compliance or reputation-control reasons.