Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

3
votes
1answer
139 views

IP address is not allowed to send mail from DOMAIN

Today I heard that a customer can't send email to us. He received the following error: < #5.5.0 smtp;550 [ipaddress] is not allowed to send mail from [domain name]. Please see ...
8
votes
3answers
237 views

Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record?

As a hosting provider, we send email on behalf of our clients, so we help them set up DKIM and SPF email records in their DNS to get email deliverability just right. We've been advising them to use ...
0
votes
1answer
37 views

Google softfail when sending between accounts on same domain

I'm dealing with this for almos a month. Tried several changes but no luck. Some users manage their e-mail addresses through standard Gmail. NOT Google Apps. Their accounts were configured as ...
-1
votes
3answers
348 views

AWS SES TXT Record Content

I need to get AWS SES setup for a domain. The registrar's DNS tool only allows me to put in a block of text for the TXT/SPF records (one block per record). I'm not sure how to format the TXT record as ...
1
vote
0answers
192 views

Mail marked as spam (Gmail/Hotmail): IP not on blacklist, DKIM Valid, SPF Valid and DMARC valid

I'm trying to send mail from my own domain (which is 15 days old now) but I'm having some troubles. Check the following mail body: Delivered-To: ------@gmail.com Received: by 10.25.89.200 with SMTP ...
1
vote
1answer
48 views

What is the best way to harden a postfix null client on an exploited php webserver?

We use postfix as a null client to send out mail from a php webserver via sendmail. We host our incoming mail servers elsewhere and use a SPF record to authorise the server to send emails from our ...
0
votes
1answer
30 views

Force PHP mail to avoid using postfix root@myorigin; use /etc/mailname instead?

I recently posted an issue setting up a mail server with postfix and virtual aliases. I solved the problem here: Postfix/Dovecot - Multiple Domains and Multiple Linux Accounts To sum it up, I set ...
-1
votes
0answers
13 views

subdomains and SPF failures

I have recently moved some of my e-mail services to sub-domains (sub1.company.com, sub2.company.com) because the SPF of the main domain - company.com got full (lot's of includes and there is more ...
63
votes
6answers
24k views

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are ...
15
votes
6answers
13k views

Do SPF Records For Primary Domain apply to subdomains?

I have a quick question regarding SPF records: Do they need to be present for all subdomains? Lets say that I have a TXT record with SPF info for domain.com Let's also say that I have a seperate ...
1
vote
0answers
10 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
0
votes
0answers
11 views

Proper records for mail and domain [duplicate]

I am having the following question: I have a domain (let's say example.com) and I need to set up the proper records for the e-mail so that to minimize the possibility for a message to go to spam. I am ...
3
votes
3answers
1k views

What is the email SPF entry for sending from Yahoo!?

I have a client that is sending email from a Yahoo! Plus account as if from her own domain. Is there a way to set up the SPF record so that it covers all of Yahoo!'s outgoing servers? i.e., what do I ...
2
votes
1answer
71 views

Only enable SRS when forwarding to enable DMARC

I am setting up a mail server on my VPS and in order to prevent spam and being marked as spam I have enabled SPF, DKIM and DMARC. However, I do not want to host my own mailbox, so I forward the ...
0
votes
2answers
43 views

SPF - Adding lots of IPs

I have 8 IPs in different ranges to add to my SPF records. All are subdomains mta1.domain.com mta2.domain.com and so on. I can't add each IPv4 to domain.com txt due to limitations. How else can I ...
22
votes
2answers
5k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
0
votes
0answers
26 views

Difficulty with second domain in an SPF Record (not allowed use email addy)

I'm kinda out of my element here so please forgive me. I have read and googled several spf post and troubleshooting tips but I can't quite figure out what I'm missing. My test email is failing ...
1
vote
0answers
62 views

New Exchanger Server installation - Email marked as spam on hotmail/outlook

New to the email hosting scene - running an Exchange 2013 box. Email is always (literally, always) marked as spam when sending out to my outlook.com account. Whereas if its sent to an email address ...
4
votes
1answer
10k views

How to resolve problems with spf / softfail?

I'm having problems with Google rejecting mail because of SPF problems. I thought I had this fixed, but evidently not... The mail is being sent from a Drupal site running mimemail. A message that ...
0
votes
0answers
20 views

SPF record getting soft failed due to dynamic ip

The SPF soft fail error I'm getting is: Received-SPF: softfail (google.com: domain of transitioning noreply@example.com does not designate 64.202.189.129 as permitted sender) ...
1
vote
0answers
32 views

SPF record not being detected by gmail

I recently added SPF record to my server & it passes all the results required. However sending email doesn't detect SPF record. The method I use to detect is whether gmail shows 'mailed-by'. I ...
5
votes
6answers
8k views

Emails going to Junk for Hotmail recipients [duplicate]

We send daily mass emails to our customers (~30,000+ emails per day). We have problems with Hotmail users receiving our emails. Sometimes the email goes to the Junk folder, but often it will got to ...
2
votes
2answers
72 views

Postfix header stating wrong IP

I am using Postfix 2.11.3 on Debian 8.0 I configured Postfix to run multiple instances (3), one for each public IP connected to our server in order to balance outgoing traffic depending on the ...
2
votes
1answer
30 views

SPF record for MX records?

I am maintaining the DNS records of a domain which was set up by someone else. I have following RRs (visible in an webinterface): example.com A 1.2.3.4 example.com MX 10:mail.example.com example.com ...
1
vote
0answers
76 views

SFP + Gmail = Emails delivered to spam box

A long time ago I posted a question here: Postfix: Gmail marking my email as spam where I said that although emails send from my servers were passing all the DKIM and SPF tests they were getting ...
0
votes
1answer
60 views

Using PTR on SPF Record and Multiple Domain Pointing Single Server

Today I've checked my SPF is valid on some of the sites and invalid on some of the sites I've tested. Microsoft also couldn't see my SPF record for some reason while others can. (Sender ID ...
1
vote
3answers
519 views

SPF Records for QuickBooks Online

QuickBooks online sends email from the email address listed on the account. This is always going to be the email address of the business rather than an email address that Intuit have permission to ...
1
vote
1answer
89 views

google apps mail error

In recent months, we have big problems when we send email on our own mailing list (for safety, I'll call our domain name example.com) staff@toto.com. All users receive this kind of mail back from the ...
0
votes
2answers
199 views

SPF check failure but cannot pinpoint issue (newbie)

I sent a test email using the port25.com email verification tool and got back the results below in it's entirety. Can someone tell me what is missing and why SPF is failing? Many thanks! -sul. This ...
1
vote
2answers
32 views

Precedence/co-existence of SPF and DKIM

Is co-existence of SPF and DKIM specified somewhere (assuming the absence of DMARC)? I want to put only my own IPs in the SPF and let 3rd parties send mail on behalf of my domain using DKIM. What ...
1
vote
0answers
172 views

SMTP error : Remote host said: 550 5.7.1 At least one FROM header address not allowed to send mail from IP ADDRESS

We are developing an email sending app, and we allow our users to specify the From: header their emails will be sent from. Let's say our domain is mydomain.com and our client domain is ...
0
votes
2answers
177 views

Spam delivered by mx.google.com despite SPF fail

Some spammer use our e-mail address as sender in forged e-mails. Now we got thousands of bounced messages from no longes existing e-mails. We set up SPF and DKIM records but it does not stop. ...
1
vote
0answers
25 views

How to troubleshoot marketing e-mail inbox rate / deliverability? [duplicate]

After previously using managed ESP's, we've recently switched over to our own server (CentOS 6) that's set up to send bulk e-mails with 12 IPs/SPF/DKIM. Campaigns are processed and sent via ...
2
votes
1answer
47 views

SPF records clarification of using A mechanism

What is the difference between using v=spf1 a ~all and v=spf1 ip4:IP_OF_A_RECORD ~all or v=spf1 IP_OF_A_RECORD ~all when configuring SPF records? Which way is correct and more robust and reliable?
3
votes
6answers
5k views

Hotmail and Live.com rejecting all emails [duplicate]

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
6
votes
2answers
2k views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
1
vote
1answer
44 views

Originating (non-critical) emails from a “less-trusted” host

Background We have a webapp running on webapp.example.com that (amongst other things) sends messages by email from time to time. These messages are non-critical: whilst we would like to make a best ...
3
votes
0answers
108 views

SPF check based on client IP instead of MTA IP?

Setup On a client computer with IP address a.a.a.a, there is a mail client that uses SMTP to send emails via company email server example.com with IP address b.b.b.b. The company email server ...
5
votes
2answers
668 views

Route 53 - Should I duplicate my SPF records as TXT records?

Amazon Route 53 supports both "SPF Records" and "TXT Records". Most documentation I read tells me to list my SPF Record as a TXT Record. I understand that the SPF Record is a newer standard. Is it ...
0
votes
1answer
37 views

Proper Setup of SPF Record

OK, so, i'm only so familiar with how the SPF system works, and my domain is being used to send all kinds of spam. Here is my current spf record: v=spf1 ip4:web.host.ip ip4:108.60.203.190 +a +mx ...
0
votes
1answer
103 views

Gmail ignoring SPF record

I have a domain whose SPF record looks like this: "v=spf1 mx ip4:6.7.8.9 -all". The record is valid, and to my understanding implies that allow mails only from: The server that is MX record for the ...
0
votes
1answer
956 views

Changing SPF (Sender Policy Framework) record for Google Apps [closed]

My boss asked me to set up Google Apps for a client and basically I have done everything including setting up MX records in DirectAdmin and re-creating the email accounts in Google Apps. I also sent ...
-1
votes
2answers
67 views

AWS: Kitterman SPF record test failing

I have had a couple of emails not arrive in my inbox. One resent the email and I received it, the other told me that the error was: non valid MX response I have been looking at my AWS SPF records and ...
7
votes
3answers
137 views

Does “~all” in the middle of an SPF record signal the end of the record when it is parsed?

Our company's SPF record format is as follows: "v=spf1 include:_spf.google.com ~all a mx ip4:X.X.0.0/23 include:spf.example.com ?all" So we have an "~all" in the middle of our SPF record. On the ...
1
vote
1answer
142 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
1
vote
1answer
83 views

Conflict between wildcard DNS entry and SPF

I have a domain set up on Amazon's Route53, and it seems the following entries are not going to work (actual values replaced, obviously). Can anyone advise on how this should be set up? This is the ...
2
votes
2answers
638 views

DNS and SPF configuration for Microsoft Exchange

We've started receiving spam with spoofed addresses from our own domain. So I'm trying to get my PTR and SPF records etc correct to prevent it. We're running Exchange 2010 on site with one server ...
14
votes
2answers
3k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
1
vote
1answer
102 views

How should my SPF record be set up, or is it even necessary?

I have a domain (fiestyturtles.com) registered at namecheap.com, and hosted at a shared webhost (hostpc.com). But I've moved the email handling of my domain to google apps, I think I set this up by ...
0
votes
0answers
13 views

What is the correct SPF setting if I want a specific IP, hosting provider's MX, and GMail to work for sending emails coming from my domain? [duplicate]

I have never set up an SPF record, so I am trying to make sure I understand what I am doing before causing all sorts of havoc. Let's say I have a domain example.org which is being hosted by ...