Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Google Apps for my domains email, and have the Google suggested SPF set:

"v=spf1 ~all"

This works as expected. In certain cases though, my web app sends emails to users (exim4) also. The problem I'm having is that when the server sends emails, the SPF soft fails:

Received-SPF: softfail ( domain of transitioning does not designate as permitted sender) client-ip=;

I'm confused how I enhance my above SPF to permit my domains IP to send emails also. I'm not sure if I need to add to the above SPF, or create a second one.

Any help would be appreciated, Thanks

share|improve this question
up vote 3 down vote accepted

The ~all tells SPF systems that only the '' systems are permitted to send email. You need to either replace the ~all part with ?all (which means other systems not explicitly listed in the SPF record are still permitted to send), or modify the SPF record so that it includes the IP address of your web app.

I think it would look something like:

v=spf1 ip: ~all

However you can probably find a web page which can help you figure it out yourself: for example, there is

share|improve this answer
It should be ip4: but otherwise that's right – DerfK Jan 27 '11 at 6:41
Thanks David and DerfK, it worked – George P Jan 27 '11 at 14:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.