Email Settings

Everything the school sends leaves through this configuration — the provider that carries it, the identity it carries, and the rules that decide when it goes out, retries or stops.

Active providerAmazon SES DeliveryHealthy · 99.4% accepted ConfigurationPublished Last test connectionToday, 09:14 AM Last updated31 Jul 2026 by Ms. Latha Rao
smtp.preskool.edu:587last handshake
EHLO mail.preskool.edu
250-smtp.preskool.edu Hello [103.21.58.14]
250-STARTTLS 250-AUTH LOGIN PLAIN
STARTTLS
220 2.0.0 Ready to start TLS
AUTH LOGIN ∗∗∗∗∗∗∗∗
235 2.7.0 Authentication successful
MAIL FROM:<noreply@preskool.edu>
250 2.1.0 Sender OK
QUIT
221 2.0.0 Service closing transmission channel
TLS1.3 Latency142 ms Result250 OK Checked09:14:02
Section 01

General

How mail behaves before anything is written.

Outbound mail

Applies to every message the system sends

Enabled
System email On — the ERP may send mail
Transport Amazon SES over SMTP
Default charset UTF-8
Message format HTML with a plain-text alternative
Send window Around the clock
5 settings · published

Localisation & footer

What every message carries at the bottom

Shared
Language English (India)
Time zone Asia/Kolkata (GMT +5:30)
Date format 31 Jul 2026, 4:12 PM
Footer address Printed on every message for compliance
Unsubscribe link On newsletters only, never on transactional mail
5 settings · published

Safety rails

Guards that stop a mistake reaching every family

1 off
Sandbox mode Off — mail reaches real recipients
Recipient allow-list Only used while sandbox is on 3 addresses
Bulk send confirmation Ask before any send above 500 recipients
Daily send ceiling 60,000 messages — refuses beyond this
Duplicate guard Block an identical message to the same address within 10 minutes
5 settings · 1 unpublished
Section 02

SMTP Configuration

The connection itself — where mail is handed over and how.

SMTP host & port

Where mail is handed over

Connected
Host email-smtp.ap-south-1.amazonaws.com
Port 587 — submission
Encryption STARTTLS, required
Authentication LOGIN over TLS
4 settings

Credentials

Held encrypted at rest

Rotates in 129 days
Username AKIA••••••••••7QK4
Password Stored encrypted, never displayed 44 chars · set 11 Jun
Rotation Every 180 days — next on 08 Dec 2026
Fallback credentials Used only if the primary key is rejected
4 settings

Timeouts & connections

How patient the sender should be

Tuned
Connection timeout 30 seconds
Read timeout 60 seconds
Keep-alive Reuse one connection for up to 100 messages
Concurrent connections 8 — within the provider ceiling of 14
Verify certificate Refuse to send if the certificate does not validate
5 settings

Connection status

Checked every 15 minutes

250 OK
Host resolves and accepts connectionsResolved to 3 addresses in ap-south-1, all reachable.
STARTTLS negotiated at TLS 1.3Certificate valid until 14 Mar 2027, issued to amazonaws.com.
Credentials accepted235 Authentication successful, 09:14:02 today.
Sender address permittednoreply@preskool.edu is a verified identity on this account.
Reverse DNS does not match the sending hostSome strict receivers treat this as a weak signal. It is not blocking delivery today.
Latency 142 ms · 5 checks
Section 03

Authentication

How the sender proves who it is, on the wire and to the provider.

SMTP authentication

How the sender proves who it is

Enforced
Require auth Refuse to send on an unauthenticated connection
Mechanism LOGIN over TLS
Anonymous relay Never permitted, on any port
Failed auth lockout Stop trying after 5 rejections and raise an alert
4 settings

Transport security

What happens on the wire

TLS 1.3
TLS Required — a plaintext session is abandoned
Minimum version TLS 1.2
SSL / implicit TLS Only on port 465, not in use here
Certificate validation Full chain and hostname verified
4 settings
OAuth connections

Google Workspace

gmail.send, gmail.compose

Connected
Accountmail-service@preskool.edu
Token expiresAuto-renewed hourly
RefreshRefresh token held
Granted 11 Jun 2026

Microsoft 365

Mail.Send, SMTP.Send

Connected
Accountnoreply@preskool.edu
Token expires14 Aug 2026
RefreshRefresh token held
Granted 02 Feb 2026

Amazon SES

ses:SendRawEmail

IAM key
AccountAKIA••••7QK4
Token expiresDoes not expire
RefreshRotated every 180 days
Rotated 11 Jun 2026
Section 04

Sender Identity

The name, address and signature every message carries.

PS

Preskool International School

noreply@preskool.edu

Verified
OrganisationPreskool International School
Reply-Tooffice@preskool.edu
Preskool International SchoolPreskool International School
12 Anna Salai, Chennai 600002
+91 44 4000 1200
Default · used by 8 templates
AC

Preskool Accounts

fees@preskool.edu

Verified
OrganisationPreskool International School
Reply-Tofees@preskool.edu
Preskool AccountsAccounts Office · Preskool
Counter hours 9:00 – 15:00
+91 44 4000 1204
Used by fee and invoice mail
AD

Admissions Office

admissions@preskool.edu

Pending
OrganisationPreskool International School
Reply-Toadmissions@preskool.edu
Admissions OfficeAdmissions Office · Preskool
Enquiries answered within 2 working days
Awaiting domain verification

Brand assets

What appears at the head of a message

Set
Header logo preskool-mail-logo.png · 320 × 80
Accent colour #3D5EE1 — used on buttons and rules #3D5EE1
Dark-mode logo Not set — the light logo is used everywhere
Social links Facebook, X, Instagram, YouTube
4 settings

Verified domains

Only a verified domain may appear in From

1 pending
preskool.edu Verified 02 Feb 2026 — primary sending domain Verified
mail.preskool.edu Verified 02 Feb 2026 — used for bounce return path Verified
preskool.org Awaiting the TXT record to appear in DNS
3 domains
Section 05

Templates

Ten messages the system knows how to write.

Ten templates, each with a plain-text alternative. Placeholders in braces are filled from the student record at send time.

Welcome to Preskool, {student}

Welcome Email

Sent on first login

Published
Edited 14 JunHTML + text
Your admission is confirmed

Admission Confirmation

Sent when a seat is allotted

Published
Edited 02 MayHTML + text
Fee due on {date} — {amount}

Fee Reminder

Three before, one after the due date

Published
Edited 28 JulHTML + text
{student} was marked absent today

Attendance Alert

Sent at 11:00 on an unexplained absence

Published
Edited 19 JunHTML + text
{exam} results are available

Exam Result

Sent when results are released

Published
Edited 11 JulHTML + text
Parent–teacher meeting on {date}

Parent Meeting

Sent when a slot is booked

Published
Edited 06 JunHTML + text
Homework set for {subject}

Homework Notification

Daily digest at 17:00

Draft
Edited yesterdayHTML + text
Reset your Preskool password

Password Reset

Sent on request, expires in 30 minutes

Published
Edited 22 FebHTML + text
Invoice {number} from Preskool

Invoice Email

Attached as a PDF

Published
Edited 28 JulHTML + text
Preskool monthly newsletter

Newsletter

First working day of the month

Draft
Edited 30 JulHTML + text
Section 06

Notification Emails

What the system sends without being asked.

What the system sends on its own. Each rule names who receives it, so nothing reaches a family by accident.

Quiet hours 21:00 – 07:00
Fee due and overdue

3 reminders before the due date, 1 after. Never more than one message a day per family.

Guardians with an open balance Email + SMS
Unexplained absence

Sent at 11:00, once attendance is locked for the morning session.

Guardians of the absent student Email + SMS
Results released

Held until the class teacher signs off, so no result reaches a family early.

Guardians and the student Email
Homework digest

Off while the template is a draft. Would send one digest at 17:00 rather than a message per subject.

Guardians of the class Email
Parent-teacher meeting

Includes an .ics attachment so the slot lands in the guardian’s calendar.

The booked guardian Email + calendar invite
System alerts

Delivery failures, provider outages and quota warnings. Never sent to families.

Administrators only Email
Section 07

Delivery Policies

Rate, retries, limits and which message goes first.

Queue & throughput

How fast mail leaves the building

Draining
Queue mode Background worker, 4 threads
Send rate 14 messages per second — the provider ceiling
Batch size 500 recipients per batch
Delivery delay None for transactional, 30 minutes for bulk
4 settings

Retry policy

What happens when a send does not succeed

3 attempts
Attempts 3, then the message is failed
Backoff 5 min, 30 min, 2 hours
Retry on soft bounce A full mailbox or greylisting is worth retrying
Retry on hard bounce A dead address never becomes live
4 settings

Limits

Ceilings that protect the sending reputation

80% of daily
Daily limit 60,000 messages
Per-recipient daily cap 6 messages to one address
Bulk send ceiling 5,000 recipients per campaign
On reaching the limit Hold in the queue rather than fail
4 settings

Priority levels

Which message overtakes which

4 levels
Critical Password reset, security alerts — sent ahead of everything 1
High Attendance alerts, results, admission letters 2
Normal Fee reminders, meeting confirmations, invoices 3
Bulk Newsletters and digests — sent only when the queue is quiet 4
4 levels
Section 08

Bounce Handling

What a rejection means and what follows it.

Bounce policy

What a rejection means and what follows it

2 today
Return path bounce@mail.preskool.edu
Hard bounce Suppress the address immediately
Soft bounce Retry, then suppress after 5 consecutive failures
Complaint (spam report) Suppress and notify an administrator
Notify the class teacher When a guardian address stops working
5 settings · 1 unpublished

Spam protection

Keeping the domain trusted

0.02% complaints
Complaint feedback loop Registered with 4 mailbox providers
Content scan Warn before sending mail that scores as spam
Link rewriting Off — rewritten links reduce trust
Reputation alerts Notify if the bounce rate passes 2%
4 settings
Suppression list

No addresses suppressed this month

Hard bounces and complaints land here and are never mailed again until someone removes them. The list has been empty since 04 Jul.

Section 09

Email Queue

What is waiting right now.

6,142 messages waiting · draining at 14/second · queue clears in about 7 minutes

Password reset r.menon@gmail.com
Critical Sending 2 sec ago
Fee reminder · batch 3 of 7 1,284 recipients
Normal Queued in 40 sec
Invoice INV/2026-27/0912 k.subramanian@outlook.com
Normal Queued in 1 min
Attendance alert · Class VII-B 18 recipients
High Queued in 2 min
Monthly newsletter 4,806 recipients
Bulk Held — waiting for a quiet queue 21:00
Meeting confirmation s.iyer@yahoo.co.in
Normal Retry 2 of 3 in 28 min
Section 10

Logs

What the provider said, in its own words.

Delivery log

Last 10 events · retained for 90 days

8 accepted 2 deferred 2 rejected
2026-08-01 09:14:02 250 noreply@preskool.edu → r.menon@gmail.com · accepted, 142 ms
2026-08-01 09:13:58 250 noreply@preskool.edu → 1,284 recipients · batch 2 of 7 accepted
2026-08-01 09:12:41 451 greylisted by mx1.yahoodns.net · retry scheduled in 5 min
2026-08-01 09:11:19 250 fees@preskool.edu → k.subramanian@outlook.com · accepted, 118 ms
2026-08-01 09:08:03 550 user unknown · a.pillai@rediffmail.com · address suppressed
2026-08-01 09:05:44 250 admissions@preskool.edu → 34 recipients · accepted
2026-08-01 08:59:12 421 too many connections from this IP · rate reduced to 10/sec for 60 s
2026-08-01 08:54:30 235 authentication successful · email-smtp.ap-south-1.amazonaws.com
2026-08-01 08:41:07 554 message rejected as spam · newsletter draft · not retried
2026-08-01 08:30:00 250 scheduled health check · connection verified, TLS 1.3
Times are Asia/Kolkata
Section 11

Security

Domain authentication, keys and who may change any of this.

Domain authentication

DKIM

Messages are signed so a receiver can prove they were not altered

Pass
preskool._domainkey.preskool.edu TXT
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Xk…IDAQAB
2048-bit · rotated 11 Jun 2026

SPF

Names the servers permitted to send as preskool.edu

Pass
preskool.edu TXT
v=spf1 include:amazonses.com include:_spf.google.com ~all
2 includes · 4 of 10 DNS lookups used
DMARC

Tells receivers what to do when DKIM or SPF fails

Quarantine
_dmarc.preskool.edu TXT
v=DMARC1; p=quarantine; rua=mailto:dmarc@preskool.edu; pct=100
Policy is quarantine, not reject — move to reject once the reports stay clean for 30 days
BIMI

Shows the school crest beside the message in supporting mailboxes

Not set
_bimi.preskool.edu TXT
— no record published —
Requires DMARC at p=reject and a verified mark certificate

API keys

Used by services that send on the school’s behalf

3 active
Amazon SES AKIA••••7QK4 · created 11 Jun 2026 Send only
SendGrid SG.••••91cX · created 02 Feb 2026 Send only
Postmark pm-••••4dA2 · created 14 Apr 2026 Send only
Revoked Mailgun key removed on 09 Jul 2026 Revoked
Keys are never shown again after creation

Access to these settings

Who may change email configuration

Restricted
Permitted roles Super admin and IT administrator only
Two-factor required To save or publish any change here
Change approval A second administrator must approve a provider change
Audit retention 3 academic years
4 settings
Section 12

Advanced

Headers, webhooks, tracking and the reset switch.

X-Preskool-Envproduction
X-Preskool-Module{module}
List-Unsubscribe<https://preskool.edu/u/{token}>
Auto-Submittedauto-generated

Added to every outbound message. They help receivers classify school mail correctly and let support trace a message back to the module that sent it.

Endpointhttps://preskool.edu/hooks/mail
Eventsdelivered, bounced, complained, opened
SigningHMAC SHA-256, shared secret rotated yearly
Unsigned callbacksDiscarded and logged

Open trackingNewsletters onlyTransactional mail is never tracked, on principle and to keep it out of the promotions tab.
Click trackingOff everywhereRewritten links harm deliverability and confuse guardians who check where a link goes.
RetentionAggregate counts only, 90 days

Resetting returns every email setting to the template default, disconnects all providers and clears stored credentials. Templates, logs and the suppression list are kept.

Section 13

Audit History

Every change, with the name against it.

Audit history

Every change to email configuration, retained for 3 academic years

8 of 214 entries
01 Aug 202609:14
Connection test run against Amazon SESSystem · scheduled health check · 250 OK
31 Jul 202616:40
Daily send ceiling raised from 40,000 to 60,000Ms. Latha Rao · approved by the Principal
31 Jul 202616:12
Homework digest notification switched offMs. Latha Rao · template still a draft
30 Jul 202611:05
Newsletter template edited — footer address correctedMr. R. Venkatesh
28 Jul 202614:22
Fee reminder template edited — new payment ceiling reflectedMs. Latha Rao
11 Jun 202609:30
SES credentials rotatedSystem · 180-day rotation policy
09 Jul 202615:48
Mailgun API key revokedMs. Latha Rao · provider moved to standby
02 Feb 202610:00
preskool.edu verified as a sending domainSystem · DKIM, SPF and DMARC published
Entries cannot be edited or removed

Mail activity

From the day the provider was connected to what is still waiting to be published.

11 Jun 202609:30

Provider connected

Amazon SES connected in ap-south-1 with a send-only IAM key.

11 Jun 202609:34

Authentication verified

DKIM signature validated, SPF include resolved, DMARC record found at quarantine.

11 Jun 202609:41
Test email sent

A single message to the IT administrator, accepted with 250 in 138 ms.

11 Jun 202609:41
Delivery successful

Delivered to the inbox, not the promotions tab, with the crest rendered.

31 Jul 202616:40
Configuration updated

Daily ceiling raised to 60,000 and the homework digest switched off. Two changes are still drafts.

Pending
Settings published

Publishing applies the drafts to every outbound message within a minute.

Amazon SES — provider configuration

Default provider · ap-south-1 · last changed 11 Jun 2026 by Ms. Latha Rao

Healthy
Configuration details
Provider Amazon Simple Email Service
Region ap-south-1 · Mumbai
Account 4471-2290-8814
Connected 11 Jun 2026 by Ms. Latha Rao
Sending quota 60,000 per day · 14 per second
Reputation Bounce 0.31% · complaint 0.02%
Current values
Host email-smtp.ap-south-1.amazonaws.com
Port 587
Encryption STARTTLS, required
Username AKIA••••7QK4 IAM key
Password Encrypted at rest 44 chars
Timeout 30 seconds
Last handshake
→ EHLO mail.preskool.edu
← 250-STARTTLS 250-AUTH LOGIN PLAIN
→ AUTH LOGIN ∗∗∗∗∗∗
← 235 2.7.0 Authentication successful
← 221 2.0.0 Service closing transmission channel
Validation
Host reachable and acceptingThree addresses resolved, all responding.
TLS 1.3 negotiatedCertificate valid until 14 Mar 2027.
Credentials accepted235 Authentication successful at 09:14:02.
Reverse DNS does not matchA weak signal for strict receivers. Not blocking delivery.
Provider information
Service Amazon SES v2
Status page health.aws.amazon.com — no incidents
Support tier Business · 1 hour response
Cost this month ₹3,860 · 48,210 messages
Dependencies
Verified domains API keys Bounce return path Queue worker

Changing the default provider would move 6 notification rules and 10 templates onto a different route. Nothing is re-sent; only future mail is affected.

Related settings
Transport security Delivery limits Retry policy DKIM signing
Audit history
01 Aug 202609:14
Health check passedSystem · 250 OK in 142 ms
31 Jul 202616:40
Daily ceiling raised to 60,000Ms. Latha Rao
11 Jun 202609:30
IAM credentials rotatedSystem · 180-day policy
11 Jun 202609:24
Provider set as defaultMs. Latha Rao · replaced SendGrid