Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

0
votes
1answer
134 views

Email abuse reports for outbound.protection.outlook.com

I've recently set up a DMARC record for my domain and now I'm receiving email abuse reports from hotmail.com that state: This is an email abuse report for an email message received from IP ...
30
votes
5answers
380 views

Is it becoming impossible to be a small mail provider?

I operate a small mail server for my private emails, some friends who have websites and two NGOs. In total my server sends between 60 and 400 messages a day. Now a lot of these emails are personal ...
0
votes
2answers
30 views

IIS Smtp server cannot send to hotmail,outlook, etc addresses

I have a SMTP server on a Windows server 2008 R2. It can send messages to all other domains except the ones hosted at Microsoft (hotmail.com,outlook.com, etc). The email messages it cannot send remain ...
1
vote
0answers
43 views

Is it valid to have SPF records for a domain that is a CNAME?

I read that it's not valid to have a CNAME for a domain that also has its own SPF, because all records are taken from the domain that the CNAME points to. However, this doesn't seem to be what ...
30
votes
2answers
8k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
1
vote
1answer
45 views

How to include multiple spf domains with different mechanisms in a single spf TXT Record

EDIT : How to Mix the different mechanisms (a , mx , ip4 , ptr and include) to create single SPF file from 4 I know that 2 simple SPF records like v=spf1 include:_spf.google.com ~all v=spf1 ...
0
votes
1answer
23 views

DMARC failed, but SPF pass

If i sent a mail from my website (on a private server) to autoreply@dmarctest.org, i have this report : <record> <row> <source_ip>x.x.x.x</source_ip> ...
0
votes
2answers
62 views

Create wildcard SPF-record [duplicate]

For a customer I would like to implement SPF for a lot of domains they own, but most of the IP's are the same. I would like to create something like for example Google, so I can use the include: ...
-1
votes
1answer
39 views

Mail server with different IP than webserver - getting 554 error

I have a webshop running on a Digital Ocean droplet, while the email inbox for the same domain is running on a different VPS. All of the sudden some of the emails sent by the webshop are being ...
0
votes
0answers
16 views

Google puts my mails to spam [duplicate]

I have a mail server with proper (I think) configuration, but Google puts my mails to the spam folder. I see the following error in the source: Received-SPF: fail (google.com: domain of ...
3
votes
1answer
106 views

exim4 configuration with SRS daemon

I'm struggeling setting up exim 4 with an external SRS daemon (Debian package srs). The srsd is running and converting addresses back and forward just fine. I can't use exim's built-in srs code, since ...
0
votes
1answer
40 views

Sender Policy Framework Qualifiers

RFC4408 defines the Sender Policy Framework (SPF). SPF has qualifiers ("-", "~", "+", "?") which are defined as (fail,softfail,pass,neutral) respectively. There is confusion amongst information ...
1
vote
1answer
29 views

SPF records and rejection based by declaration client IP

I use my personal email server one small setup by Microsoft Exchange Online. I'm not I professional IT but I prefer Exchange for many reason. Now I use this SPF record: v=spf1 ...
0
votes
0answers
15 views

Postfix mail always in spam [duplicate]

I've installed and configured postfix trying to find the best way on the web. This is postfix main.cf: smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout ...
0
votes
2answers
54 views

Spam mail even after setting SPF

I have set the SPF record for my domain powered by Google Apps. I followed the steps here . But even after setting the SPF record, spam mails are being sent from the domain. What am I missing?
1
vote
2answers
60 views

Mandrill, AWS, Namecheap, SPF missing domain error

I'm trying to setup a Sending Domain on Mandrill but I get a SPF missing error. My APP is running on AWS, I'm using EC2 and Elastic Beanstalk, and my domain is on Namecheap. DNS are setup as follow: ...
1
vote
1answer
68 views

SPF record not being detected by gmail

I recently added SPF record to my server & it passes all the results required. However sending email doesn't detect SPF record. The method I use to detect is whether gmail shows 'mailed-by'. I ...
1
vote
2answers
41 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
3
votes
2answers
306 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
1
vote
1answer
137 views

Confused about enhancing existing Google SPF to permit server-sent emails also

I'm using Google Apps for my domains email, and have the Google suggested SPF set: "v=spf1 include:_spf.google.com ~all" This works as expected. In certain cases though, my web app sends emails to ...
3
votes
1answer
77 views

Delivery Status Notification (Failure) => 550 SPF: x.x.x.x (IP address) is not allowed to send mail from <our-domain.com>

Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the server for the recipient domain <repipients-domain.com> by <repipients-domain.com>. ...
2
votes
2answers
326 views

Gmail ignoring SPF record

I have a domain whose SPF record looks like this: "v=spf1 mx ip4:6.7.8.9 -all". The record is valid, and to my understanding implies that allow mails only from: The server that is MX record for the ...
2
votes
1answer
31 views

SPF: Which IP is being looked at during evaluation?

Let's say I have: public IP address A: sending host public IP address B: mail relay for A public IP address C: receiver MX What IP does C look at? Does he try to find the IP of A in the ...
0
votes
1answer
28 views

SPF record for relay server [duplicate]

Obviously my own mail servers should be marked as "allow" in an SPF record, but I'm not so sure about mail relays (e.g. my ISP). Since other people (not related at all with my server) also send email ...
0
votes
0answers
20 views

What is the purpose of an email Sender header? [duplicate]

My understanding is that the From address of an e-mail is only for human readers. Automated spam checkers, relays, and suchlike will check the Sender address, and will look at the From address only if ...
1
vote
0answers
20 views

FCrDNS for a mail server that also runs other services (http, ftp etc)

I am learning how to administer productive internet-facing machines and services, and towards that end setting up mail, web, and a couple other services, all on the same box (budget constraints and ...
-1
votes
1answer
42 views

Why does Google junk mails from my server? [duplicate]

I have a send-only mail server setup on an Ubuntu VPS. The mail server is only used to send out registration e-mails from a web application. I have the following configured: DomainKeys Identified ...
0
votes
1answer
48 views

Does DMARC send alerts even upon successful delivery?

I keep getting DMARC reports that show that my IP passed all SPF and DKIM checks. Is this just an email to say that everything's fine or is it an indication of a problem? If the latter, there's ...
4
votes
3answers
468 views

With valid SPF my mail header becomes huge -> high spamassasin score

I have a dedicated server with a survey system running on a subdomain. The parent domain is hosted on another server. I send email via google apps. Reverse DNS is correct. Without SPF og DKIM, the ...
2
votes
2answers
2k views

All headers pass, hotmail still marks as spam [duplicate]

Possible Duplicate: Why Does hotmail still reject my emails? So I've been working a long time on fixing the Hotmail issue, but nothing seems to work: Created my SPF records with the ...
0
votes
1answer
45 views

SPF in hotmail are not used [duplicate]

I have a problem with Hotmail provider, all mail sent from my server goes to SPAM folder. I Have added a correct SPF to my domain example.com but into the headers is not used (spf=none) and the token ...
2
votes
2answers
173 views

Postfix header stating wrong IP

I am using Postfix 2.11.3 on Debian 8.0 I configured Postfix to run multiple instances (3), one for each public IP connected to our server in order to balance outgoing traffic depending on the ...
1
vote
3answers
90 views

Order emails from online shop not delivered due to SPF errors

I have my domain served by two servers with different IP addresses: one for main website and another for online shop. When a customer places an order, among other things, an email is being sent to an ...
8
votes
1answer
218 views

How can I have an SPF record longer than 255 characters?

So, I have been under the impression that individual SPF entries had to fit in 255 chars, or use the include operator to link together multiple entries forming a chain. However, RFC 4408 3.1.3. ...
0
votes
1answer
64 views

What can I do if an SPF hasn't propagated weeks or months after being changed? How to force SPF to propagate?

I set up a domain, SMTP mailserver etc on a Centos box a few months ago, including PTR records that looked like this: pop PTR XX.XX.XX.XX. www PTR XX.XX.XX.XX. mail PTR XX.XX.XX.XX. Everything ...
-1
votes
1answer
88 views

SPF softfail domain does not designate IP as permitted sender

I use both mailgun and a namecheap mail server (where I also have my domain) and when I receive mails in my gmail account, mailgun is recognized as a permitted sender, but that's not the case of ...
0
votes
3answers
70 views

Why are my messages being rejected due to SPF record issues? [duplicate]

I'm looking for a little guidance as to how to setup a server I am working on, so that emails get through to people without being sent back by an SPF filter. I send out email and this is the response ...
0
votes
1answer
38 views

How to Properly Set SPF Record [duplicate]

I am new to setting up server, this is my first time setting up mail server on my own. I am using ubuntu with webmin, everytime I send and receive from gmail, I had no problem. I can receive emails ...
20
votes
6answers
19k views

Do SPF Records For Primary Domain apply to subdomains?

I have a quick question regarding SPF records: Do they need to be present for all subdomains? Lets say that I have a TXT record with SPF info for domain.com Let's also say that I have a seperate ...
2
votes
1answer
50 views

Exchange Online, Mandrill, SPF and DKIM

I have a customer ABC Ltd (abc.ie) who has a requirement to send emails via SMTP to their own customer base from within an application that we have developed for them. For their company email they ...
2
votes
2answers
4k views

Assistance diagnosing SenderID PermError in Exchange 2010

We're having issues with a customer's domain. They're wanting to do a mail-out with a service called Act-On, and so far all the tests seem to be getting flagged as spam. The customer has tried ...
0
votes
0answers
14 views

Which host(s) to include in SPF record to prevent email spoofing [duplicate]

I've got domain name and email hosting from a third-party hosting provider (1and1). Some of the email addresses under the domain are being spoofed by spammers. In order to mitigate this I'd like to ...
0
votes
0answers
9 views

Five Questions about Specific Examples of Sender Policy Frameworks (SPF) [duplicate]

I have spent some time learning about SPF and have five questions based on specific SPF policies. I obtained the SPF data via http://www.kitterman.com/spf/validate.html In advance, many thanks for ...
0
votes
0answers
41 views

Cant sent mail from own server to google

I'm running a mail server and I'm having problem with sending mails to google. Mails to other providers work fine. I guess its maybe related to my DNS settings, as I've read that google is quite ...
2
votes
1answer
40 views

SPF “include:” does MX stay as included domain's MX, or get translated to the includer's MX?

SPF records allow you to include another's domains SPF record within your own. For example, example.com can have include:_spf.google.com in its SPF record to include all of the SPF rules for ...
0
votes
0answers
11 views

Yahoo marked my mail as spam [duplicate]

Yahoo is marking our mail as spam. Mail header says that Domain Key, PTR, SPF all ok. From Abrabos Mon Jan 18 23:41:38 2016 X-Apparently-To: carry.vaillant@yahoo.com; Mon, 18 Jan 2016 23:45:10 +0000 ...
6
votes
1answer
215 views

Should I put Scope:Link or scope:Global IPv6 address in DNS AAAA record?

I have a mail server for which I need to create the AAAA DNS record and update the SPF record to include its IPv6 address. An ifconfig command shows a Scope:Link IPv6 address and a Scope:Global IPv6 ...
16
votes
3answers
6k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
0
votes
2answers
40 views

How do I send (legitimate) email on a dedicated server as appearing from different domains?

We need to send email using PHP's mail() function (Actually CakePHP, which wraps that function) directly from our dedicated server (app.ourserver.com). We would like to send mail from ...
0
votes
1answer
86 views

SPF + DKIM + DMARC with Gmail account and external mail server

I,m using gmail with own domain (Google Apps) for my project. Now I want to add external mail server for sending notifications for users. Gmail doesn't give private keys for DKIM and if keys will be ...