Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

0
votes
0answers
25 views

Why don't my domain's messages to a google group get their headers rewritten so DMARC can pass?

Whenever my domain sends a message to a google group on another domain the DMARC alignment fails. This is true for all my approved senders, even using Gmail in my domain. It seems to be because the ...
0
votes
3answers
38 views

SPF Record bypassed

I just received an email from feedback@ranelaghhouse.com to feedback@ranelaghhouse.com which was caught by my catch-all and emailed to me. Below are the headers for the email which show that it was ...
-1
votes
0answers
10 views

Mandrill domain verification email not being sent

We've got a Mandrill/Mailchimp account set up to send emails from a client's domain. We have valid DKIM and SPF records and Mandrill is happy with them, the only thing remaining is sending the ...
0
votes
2answers
249 views

How to setup postfix to check SPF record only for domains that i want to check

I have working postfix server. It configured with amavis and uses pretty good SMTP headers control. But sometimes my users receive spam from spammers with well known mail service providers addresses. ...
1
vote
1answer
22 views

SPF redirect modifier

The SPF record for domain replace the current record. The macro-expanded domain is also substituted for the current-domain in those look-ups. Examples: In the following example, the ...
33
votes
5answers
554 views

Is it becoming impossible to be a small mail provider?

I operate a small mail server for my private emails, some friends who have websites and two NGOs. In total my server sends between 60 and 400 messages a day. Now a lot of these emails are personal ...
-2
votes
4answers
49 views

SPF, CloudFlare, Google Apps - Email sent through Contact Form marked as spam

One of the main reasons of putting your server behind CloudFlare is to hide your server's IP address so an attacker can't DDoS your IP and render CloudFlare obsolete. By putting your server behind ...
0
votes
2answers
20 views

Service to test outgoing mail for SPF/DKIM/SRS validity?

We're setting up a redirection-based mail server with a lot of complex moving parts, including the standard ones that apply to everyone like SPF/TLS as well as the more complex ones needed to ensure ...
0
votes
1answer
24 views

How do I specify the hostname SPF shows to users?

I have a production Magento site which is on a dedicated host. The machine has it's "hosting" name, host-123.hosting.com, as well as its public name, buystuffhere.com. DNS has been configured for ...
0
votes
1answer
24 views

SPF redirect to subdomain TXT does not work for Google?

Funny situation, and I'm not sure if this is my fault or Google's. I have a domain, example.com, which has 2 subdomains: main.example.com, and spf.example.com. For main.example.com domain, my TXT ...
-2
votes
1answer
27 views

My Email Strightly goes to gmail spam/just folder ( DKIM,SPF,DMARC is okay ) [duplicate]

( it's not duplicate , its related to rDNS , please don't flag it as duplicate or give me the link of related one ) i have a problem, my emails from my mydomain.com straightly goes to spam folder in ...
2
votes
1answer
35 views

Why does DNSstuff fail but SPF softfail?

Why does this online tool fail the SPF check http://www.dnsstuff.com/tools#spf|type=ipv4&&value=155.133.82.39&&email=fake@gmail.com But an installed Perl SPF check softfails the SPF ...
0
votes
1answer
27 views

Postfix, SPF, and Perl: warning: premature end-of-input on private/policy while reading input attribute name

I followed this guide (http://www.thenoccave.com/2013/05/08/centos-6-postfix-spf-checking/) but I'm getting the following errors in maillog: May 8 22:15:13 ip-172-31-15-65 postfix/smtpd[1999]: ...
0
votes
1answer
34 views

Exchange 2010 ignoring SPF record

we are using Exchange 2010 and have already setup SPF record for our authorized mail server IPs. As a test using our domain name i tried to send an e-mail from another computer on the internet which ...
0
votes
0answers
50 views

Gmail does not detect range of IPs on SPF record

I have recently setup a SPF record for our domain. We have an exchange server and a relay server which can send e-mails from our domain. Our exchange IP is xxx.xxx.xxx.78 and relay server is ...
0
votes
0answers
49 views

Setting up email forwarding in Exchange without SPF violations

I have an objective of configuring our mail server to forward inbound messages to third party provider. Mail have to appear from original sender Forwarding have to be managed from Exchange Server, ...
0
votes
1answer
189 views

Email abuse reports for outbound.protection.outlook.com

I've recently set up a DMARC record for my domain and now I'm receiving email abuse reports from hotmail.com that state: This is an email abuse report for an email message received from IP ...
0
votes
2answers
55 views

IIS Smtp server cannot send to hotmail,outlook, etc addresses

I have a SMTP server on a Windows server 2008 R2. It can send messages to all other domains except the ones hosted at Microsoft (hotmail.com,outlook.com, etc). The email messages it cannot send remain ...
1
vote
0answers
45 views

Is it valid to have SPF records for a domain that is a CNAME?

I read that it's not valid to have a CNAME for a domain that also has its own SPF, because all records are taken from the domain that the CNAME points to. However, this doesn't seem to be what ...
32
votes
2answers
8k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
1
vote
1answer
66 views

How to include multiple spf domains with different mechanisms in a single spf TXT Record [duplicate]

EDIT : How to Mix the different mechanisms (a , mx , ip4 , ptr and include) to create single SPF file from 4 I know that 2 simple SPF records like v=spf1 include:_spf.google.com ~all v=spf1 ...
0
votes
1answer
34 views

DMARC failed, but SPF pass

If i sent a mail from my website (on a private server) to autoreply@dmarctest.org, i have this report : <record> <row> <source_ip>x.x.x.x</source_ip> ...
0
votes
2answers
63 views

Create wildcard SPF-record [duplicate]

For a customer I would like to implement SPF for a lot of domains they own, but most of the IP's are the same. I would like to create something like for example Google, so I can use the include: ...
-1
votes
1answer
43 views

Mail server with different IP than webserver - getting 554 error

I have a webshop running on a Digital Ocean droplet, while the email inbox for the same domain is running on a different VPS. All of the sudden some of the emails sent by the webshop are being ...
0
votes
0answers
16 views

Google puts my mails to spam [duplicate]

I have a mail server with proper (I think) configuration, but Google puts my mails to the spam folder. I see the following error in the source: Received-SPF: fail (google.com: domain of ...
3
votes
1answer
120 views

exim4 configuration with SRS daemon

I'm struggeling setting up exim 4 with an external SRS daemon (Debian package srs). The srsd is running and converting addresses back and forward just fine. I can't use exim's built-in srs code, since ...
0
votes
1answer
40 views

Sender Policy Framework Qualifiers

RFC4408 defines the Sender Policy Framework (SPF). SPF has qualifiers ("-", "~", "+", "?") which are defined as (fail,softfail,pass,neutral) respectively. There is confusion amongst information ...
1
vote
1answer
37 views

SPF records and rejection based by declaration client IP

I use my personal email server one small setup by Microsoft Exchange Online. I'm not I professional IT but I prefer Exchange for many reason. Now I use this SPF record: v=spf1 ...
0
votes
0answers
15 views

Postfix mail always in spam [duplicate]

I've installed and configured postfix trying to find the best way on the web. This is postfix main.cf: smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout ...
0
votes
2answers
56 views

Spam mail even after setting SPF

I have set the SPF record for my domain powered by Google Apps. I followed the steps here . But even after setting the SPF record, spam mails are being sent from the domain. What am I missing?
1
vote
2answers
77 views

Mandrill, AWS, Namecheap, SPF missing domain error

I'm trying to setup a Sending Domain on Mandrill but I get a SPF missing error. My APP is running on AWS, I'm using EC2 and Elastic Beanstalk, and my domain is on Namecheap. DNS are setup as follow: ...
1
vote
1answer
74 views

SPF record not being detected by gmail

I recently added SPF record to my server & it passes all the results required. However sending email doesn't detect SPF record. The method I use to detect is whether gmail shows 'mailed-by'. I ...
1
vote
2answers
43 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
3
votes
2answers
320 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
1
vote
1answer
140 views

Confused about enhancing existing Google SPF to permit server-sent emails also

I'm using Google Apps for my domains email, and have the Google suggested SPF set: "v=spf1 include:_spf.google.com ~all" This works as expected. In certain cases though, my web app sends emails to ...
3
votes
1answer
90 views

Delivery Status Notification (Failure) => 550 SPF: x.x.x.x (IP address) is not allowed to send mail from <our-domain.com>

Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the server for the recipient domain <repipients-domain.com> by <repipients-domain.com>. ...
2
votes
2answers
357 views

Gmail ignoring SPF record

I have a domain whose SPF record looks like this: "v=spf1 mx ip4:6.7.8.9 -all". The record is valid, and to my understanding implies that allow mails only from: The server that is MX record for the ...
2
votes
1answer
32 views

SPF: Which IP is being looked at during evaluation?

Let's say I have: public IP address A: sending host public IP address B: mail relay for A public IP address C: receiver MX What IP does C look at? Does he try to find the IP of A in the ...
0
votes
1answer
30 views

SPF record for relay server [duplicate]

Obviously my own mail servers should be marked as "allow" in an SPF record, but I'm not so sure about mail relays (e.g. my ISP). Since other people (not related at all with my server) also send email ...
0
votes
0answers
21 views

What is the purpose of an email Sender header? [duplicate]

My understanding is that the From address of an e-mail is only for human readers. Automated spam checkers, relays, and suchlike will check the Sender address, and will look at the From address only if ...
1
vote
0answers
20 views

FCrDNS for a mail server that also runs other services (http, ftp etc)

I am learning how to administer productive internet-facing machines and services, and towards that end setting up mail, web, and a couple other services, all on the same box (budget constraints and ...
-1
votes
1answer
43 views

Why does Google junk mails from my server? [duplicate]

I have a send-only mail server setup on an Ubuntu VPS. The mail server is only used to send out registration e-mails from a web application. I have the following configured: DomainKeys Identified ...
0
votes
1answer
49 views

Does DMARC send alerts even upon successful delivery?

I keep getting DMARC reports that show that my IP passed all SPF and DKIM checks. Is this just an email to say that everything's fine or is it an indication of a problem? If the latter, there's ...
4
votes
3answers
473 views

With valid SPF my mail header becomes huge -> high spamassasin score

I have a dedicated server with a survey system running on a subdomain. The parent domain is hosted on another server. I send email via google apps. Reverse DNS is correct. Without SPF og DKIM, the ...
2
votes
2answers
2k views

All headers pass, hotmail still marks as spam [duplicate]

Possible Duplicate: Why Does hotmail still reject my emails? So I've been working a long time on fixing the Hotmail issue, but nothing seems to work: Created my SPF records with the ...
0
votes
1answer
48 views

SPF in hotmail are not used [duplicate]

I have a problem with Hotmail provider, all mail sent from my server goes to SPAM folder. I Have added a correct SPF to my domain example.com but into the headers is not used (spf=none) and the token ...
2
votes
2answers
190 views

Postfix header stating wrong IP

I am using Postfix 2.11.3 on Debian 8.0 I configured Postfix to run multiple instances (3), one for each public IP connected to our server in order to balance outgoing traffic depending on the ...
1
vote
3answers
93 views

Order emails from online shop not delivered due to SPF errors

I have my domain served by two servers with different IP addresses: one for main website and another for online shop. When a customer places an order, among other things, an email is being sent to an ...
8
votes
1answer
246 views

How can I have an SPF record longer than 255 characters?

So, I have been under the impression that individual SPF entries had to fit in 255 chars, or use the include operator to link together multiple entries forming a chain. However, RFC 4408 3.1.3. ...
0
votes
1answer
77 views

What can I do if an SPF hasn't propagated weeks or months after being changed? How to force SPF to propagate?

I set up a domain, SMTP mailserver etc on a Centos box a few months ago, including PTR records that looked like this: pop PTR XX.XX.XX.XX. www PTR XX.XX.XX.XX. mail PTR XX.XX.XX.XX. Everything ...