Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm using Google Apps for my domains email, and have the Google suggested SPF set:

"v=spf1 include:_spf.google.com ~all"

This works as expected. In certain cases though, my web app sends emails to users (exim4) also. The problem I'm having is that when the server sends emails, the SPF soft fails:

Received-SPF: softfail (google.com: domain of transitioning xxx@xxx.com does not designate 11.11.111.11 as permitted sender) client-ip=11.11.111.11;

I'm confused how I enhance my above SPF to permit my domains IP to send emails also. I'm not sure if I need to add to the above SPF, or create a second one.

Any help would be appreciated, Thanks

share|improve this question
add comment

1 Answer 1

up vote 3 down vote accepted

The ~all tells SPF systems that only the 'google.com' systems are permitted to send email. You need to either replace the ~all part with ?all (which means other systems not explicitly listed in the SPF record are still permitted to send), or modify the SPF record so that it includes the IP address of your web app.

I think it would look something like:

v=spf1 ip:11.11.111.11 include:_spf.google.com ~all

However you can probably find a web page which can help you figure it out yourself: for example, there is http://old.openspf.org/wizard.html

share|improve this answer
    
It should be ip4:11.11.111.11 but otherwise that's right –  DerfK Jan 27 '11 at 6:41
    
Thanks David and DerfK, it worked –  George P Jan 27 '11 at 14:21
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.