Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem with one of the email services. It rejects emails from my server. I contacted them and they answered that they check SPF records and I am sending emails from not authorised server.

This is my SPF record:

v=spf1 a mx ~all 

It contains "a" and so far I was sure that it's enough and I can send mail from server which IP address is listed as A record. Do I need to include server's IP address?

share|improve this question
Let's see the bounce message. – Michael Hampton Jan 21 '13 at 22:04
are you trying to send emails from gmail? – Hex Jan 21 '13 at 23:07
no, Gmail is accepting my email without problems. It's a small provider. – user1821484 Jan 23 '13 at 7:50
up vote 3 down vote accepted

Google recommends just v=spf1 ~all as per

share|improve this answer
But what about "A"record? I wanted to know if there is a need to add: "ip4:myserversip" or is enough to add just "a". – user1821484 Jan 22 '13 at 8:16
As long as it's the same ip as the a record for the domain, it's enough. Also, you specified ~all vs -all. It means to soft fail. They shouldn't be rejecting the email only for a fail with the spf records. A key thing to verify is that reverse dns is working correctly for your server's ips. – kormoc Jan 22 '13 at 20:26
Yes, reverse DNS is working correctly. All main email providers like Gmail, Yahoo. Hotmail accept mails from my server. It's only 1 small provider says I have problems with everything. – user1821484 Jan 23 '13 at 8:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.