Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Google Apps for my domains email, and have the Google suggested SPF set:

"v=spf1 include:_spf.google.com ~all"

This works as expected. In certain cases though, my web app sends emails to users (exim4) also. The problem I'm having is that when the server sends emails, the SPF soft fails:

Received-SPF: softfail (google.com: domain of transitioning xxx@xxx.com does not designate 11.11.111.11 as permitted sender) client-ip=11.11.111.11;

I'm confused how I enhance my above SPF to permit my domains IP to send emails also. I'm not sure if I need to add to the above SPF, or create a second one.

Any help would be appreciated, Thanks

share|improve this question
up vote 3 down vote accepted

Your current record authorizes Google servers. The ~all tells SPF systems that servers not explicitly authorized should softfail.

You can either modify the SPF record so that it includes the IP addresses of your web app, or replace the ~all part with ?all (not recommended)

I think it would look something like:

v=spf1 ip4:11.11.111.11 include:_spf.google.com ~all

However you can probably find a web page which can help you figure it out yourself: for example, there is http://old.openspf.org/wizard.html

share|improve this answer
    
It should be ip4:11.11.111.11 but otherwise that's right – DerfK Jan 27 '11 at 6:41
    
Thanks David and DerfK, it worked – George P Jan 27 '11 at 14:21

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.