Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We've configured SPF for our Google Apps For Your Domain domain some time ago, and resources like validate it as setup correctly (we also have DKIM, etc). For the past year however, we've been getting a lot of "Mail not delivered" messages and replies to strange emails from our domain we've never sent. Sometimes they include the headers from the original email and they look like this:

Received-SPF: unknown( domain of uses a mechanism not recognized by this client)

In this case the spam service appears to be "Spam Arrest," based on other headers.

So my question is, what can I do to stop this flow of invalid email from our domain? And what can I do to get services like the above to understand our SPF record? Is the default Gmail SPF record not fully compatible with some common spam services?

There's much debate over whether the tilde belongs in a Gmail SPF record, so we've tried changing our SPF record to be more strict:

v=spf1 -all

But we still see emails like the above. Is there anything we can do to be better netizens?

Note that this question is somewhat similar to this one, except this is for sending from Gmail - theirs was about getting their SPF record to be accepted by Gmail.

share|improve this question

1 Answer 1

up vote 2 down vote accepted includes descriptive text "v=spf1 ?all" descriptive text "v=spf1 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 ?all"

Which specifies only IPv6 addresses. only specifies IPv4 addresses, so I'd guess that that spam service doesn't support IPv6 SPF records.

There's not much you can do about this though.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.