I have a MX record for my primary domain (j.com) that is my incoming and outgoing email server for our corporate email. We also have a few other domains that we send email from (p.com) which MX records are also pointing to the IP address of this server.
However, we have various providers of email services (all opt-in, friendly, non-spammy type stuff) that send email on our behalf (that says it is coming from j.com and/or p.com).
How would I set up appropriate SPF records to allow these external vendors as "allowed" to send email on j and p.com's behalf while, of course, still allowing the main server(s) to send email as usual? I have collected all the IP addresses of the servers that will be sending mail on our behalf. Thanks!!
We currently have no SPF policy so this would be setting it up from scratch. I've visited various SPF wizards (http://old.openspf.org/wizard.html and http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/) but am not sure what all switches to throw and how to combine records.
My starting point is:
j.com IN TXT "v=spf1 mx a ip4:XXX.XXX.XXX.XXX/32 ip4:XXX.XXX.XXX.XXX/32 ip4:XXX.XXX.XXX.XXX/32 -all"
p.com IN TXT "v=spf1 mx a ip4:XXX.XXX.XXX.XXX/32 ip4:XXX.XXX.XXX.XXX/32 ip4:XXX.XXX.XXX.XXX/32 -all"