Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use Google Apps with my domain.

Recently, we have begun to receive spam that gets past Google's spam filters. They are from our own email addresses.

I am wondering how to prevent this kind of email spoofing.

We use an SPF record with the "~all" setting. I'm wondering if I can upgrade that to "-all". However, Google Apps recommends against it. Also, I'm not 100% sure that our SPF record is complete.

Any suggestions?

Thank you ever so much.

share|improve this question

You can set your SPF record to v=spf1 -all and it should work fine. Google is just covering their butt in case they change a mail relay's IP without changing their SPF record first.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.