Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

5
votes
1answer
1k views

Is it OK to have multiple TXT records for a single domain containing different SPF entries?

A remote recipient domain is rejecting mail on the grounds of SPF and I think it's because the sender has SPF configured incorrectly. When I run dig, I see: [fooadm@box ~]# dig @8.8.8.8 -t TXT ...
1
vote
1answer
124 views

gmail contacts IP from SPF and fails to send mail to some domains

I have strange problem with my SPF records and gmail MX. I have this SPF setup v=spf1 a mx ip4:IP1 ip4:IP2 include:_spf.google.com ~all In this case, if I send an email to two specific domains, ...
1
vote
2answers
45 views

Is there any difference between different ways of expressing the same information in an SPF record?

I have a domain at example.com. The MX record is 10 cp.example.net. These domains are on two different IP addresses. Let's say that example.com is on 198.51.100.0, while example.net and cp.example.net ...
0
votes
1answer
88 views

DNS Redirect Website to another Server

I have two servers, server 1 and server2. The name serververs of the domain points to server1. 1.I have this configuration regarding Server1 DNS Zones: domain.com. 1200 IN A server2-ip Edit ...
0
votes
1answer
46 views

What to look for when using a 3rd party Email Enrichment Service - to secure our emails? [closed]

Our marketing team wants to use a 3rd party Email Enrichment Service. I want to try and tackle this, as I don't like the idea that my mail will go through a certified service and exposed. I know ...
-1
votes
1answer
64 views

How does SPF reduce backscatter with a Google Apps account

Reading up on the SPF spec, I understand that SPF designates certain IPs as valid sender SMTP server IPs. For Google Apps, the SPF record is supposed to be v=spf1 include:_spf.google.com ~all. The ...
0
votes
1answer
415 views

Configuring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP servers

Today we realized that all of our emails being sent to email addresses of the type <username>@corporatedomain.com were getting rejected. I don't know who is hosting the email for ...
8
votes
1answer
1k views

Office365 SPF record has too many lookups

For some utterly ridiculous administrative reasons we've got a split domain with one mailbox on Office365 which requires us to add include:outlook.com to our SPF record. The problem with this is that ...
0
votes
1answer
101 views

Icinga notifications are being marked as spam when sent to my mailbox

I'm using gmail and my domain is foo.com About half the notifications from my icinga server, icinga@foo.com go to my spam folder for me@gmail.com Received-SPF: fail (google.com: domain of ...
1
vote
2answers
580 views

TinyDNS and proper settings for SPF records [duplicate]

I've inherited a TinyDNS configuration that have following entries for SPF: @domain.com:x.x.x.3:a::86400 @domain.com:x.x.x.103:c:10:86400 =domain.com:x.x.x.3:86400 =mail.domain.com:x.x.x.3:86400 ...
1
vote
1answer
367 views

Failure notice with my mail server, what to do?

I've build a simple Mail server for my personal use, but Google reject my emails whatever I do. I worked hard finding the initials problems (wrong SPF entries in the DNS), but now, everything seems ...
6
votes
4answers
1k views

Why does my mail get marked as spam?

I Have the server "afspraakmanager.be". It matches everything not to be a spam server.(it isn't by the way): it has reverse dns, spf,dkim,... . But hotmail marks it as spam. I think the problem is ...
0
votes
1answer
269 views

SPF + ISP Smarthost, always untrusted?

One of the ways mail-servers protect themselves from spam is by SPF-records, a DNS look-up saying what ip-adresses are allowed to send mail from a given domain name. Another way the mail-servers use ...
2
votes
1answer
110 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
2
votes
1answer
99 views

SPF record validation - best guess only

I administrate the domain [mydomain.com] which was until now only used for handling mail through Google Mail/Google Apps. Now I added a server which should be part of the domain without changing the ...
0
votes
1answer
81 views

Should I put SPF checks before or after RBL checks in Postfix SMTP server?

I am setting up a Postfix SMTP server (pre v2.10) and was thinking to put the smtpd_recipient_restrictions as follows. smtpd_recipient_restrictions= permit_mynetworks, ...
2
votes
1answer
359 views

Using “mx ptr” parameters in DNS SPF record

I'm trying to set up my SPF record to validate properly both for emails sent through Google Apps and for those sent from MailChimp's servers. MailChimp's docs recommend this SPF record: v=spf1 mx ptr ...
0
votes
1answer
111 views

What will be the SPF entry in DNS?

We are using magento on our server. Magento sent transactional emails directly from our server using php mail function, along with this we are using third party webmail service. Means our mx entry ...
0
votes
1answer
772 views

Assistance diagnosing SenderID PermError in Exchange 2010

We're having issues with a customer's domain. They're wanting to do a mail-out with a service called Act-On, and so far all the tests seem to be getting flagged as spam. The customer has tried ...
0
votes
2answers
1k views

Combining multiple SPF records - SenderID - kind of lost

Tried to read up on SPF record creating but I am a bit lost. I need to combine and create an SPF record because our email is not getting through. Here are the ways we send email: Daily ...
4
votes
3answers
3k views

Why is my email failing Gmail's DKIM test?

I have a message that was rejected by Gmail, I don't know why. It passes SPF. We aren't using DKIM. Do I need to set up DKIM? I am in control of "example.com". Our mail server is "server.example.com" ...
0
votes
2answers
276 views

How to setup spf1 record Using Cloudflare, outlook.com and sending mail directly from php server?

I have a web server with a community website on it, and 1 subdomain on another ip. I use Cloudflare, and made outlook.com handle my mail for me. However my web server also sends mail. For example, a ...
0
votes
1answer
48 views

SPF record configuration [duplicate]

I am a bit confused about the creation of SPF records. I have my hosting domain: hosting.mydomain.com, this is the hostname of the actual server running postfix etc. I have configured my DNS like ...
0
votes
1answer
34 views

Next Step in Migrating Exchange 2003 to GMail (SPF risks when changing MX record vs disable SMTP)

Our company has been struggling to migrate Exchange to GMail for last 2 years (I will leave this for /r/talesfromtechsupport). We have two domains on two different ccTLDs, and lately Exchange is just ...
1
vote
2answers
361 views

SPF: Difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all

What is the difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all (the first one is with underline character in front of the spf, the second one without)
0
votes
3answers
314 views

SPF Records for QuickBooks Online

QuickBooks online sends email from the email address listed on the account. This is always going to be the email address of the business rather than an email address that Intuit have permission to ...
2
votes
1answer
74 views

How to control the originating IPv6 of emails sent by postfix?

In a VPS with 2 IPv4 and 16 IPv6, I send emails with postfix. Each time, the email is sent from one of the IPs randomly Received: from domain.com (a random IPv6 out of my 16 IPv6) Thus, SPF fails ...
1
vote
1answer
250 views

SPF: softfail (domain of transitioning email does not designate 2a01:4f8:121:2062::2 as permitted sender)

I am seeing this SPF softfail for emails sent from my server, and I notice that 2a01:4f8:121:2062::2 is an IPV6 address. When I check 2a01:4f8:121:2062::2 it is translated as 0.0.0.2 ipv4, so that ...
1
vote
1answer
81 views

How to choose email SPF qualifier?

I'm helping manage a domain that seems to have been given a bad reputation spam-wise, as we get a lot of emails bounced. I am told that it's suspected the domain has been used by spammers to send ...
0
votes
2answers
313 views

Mail goes to spam when using `mail` from command line

I've a CentOS 6.4 server with DirectAdmin. When I send an email using the mail command from command line, it's always marked as spam by Gmail. So, every system emails go to spam and so do every emails ...
1
vote
2answers
918 views

Why does Google reject my outgoing emails?

I have the following DNS records set up for my mailserver (obfuscated Domain and IPs): mydomain.net. 86400 IN A 109.83.50.87 mydomain.net. 86400 IN AAAA ...
3
votes
1answer
4k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
0
votes
1answer
146 views

Add multiple domain/IPs to SPF record to support google and third part senders [duplicate]

We are using Google Apps as email provider and have added following SPF record for our domain v=spf1 a mx ptr include:_spf.google.com -all We also use LivePerson as a support system and when they ...
0
votes
1answer
222 views

Mail marked as spam with SPF record allowing server's ipv4 but not ipv6

This question is mostly out of curiosity as I have now updated the SPF record to include the ipv6 address. I have a server and I tested its php email sending ability by sending myself an email from ...
1
vote
2answers
3k views

How to setup correct SPF record

I am trying to setup a very basic SPF record. I am hosting my website on Godaddy and using Godaddy's email servers. I am using the php mail() call (I know, I've read a ton of places to use PHP ...
5
votes
1answer
140 views

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it ...
0
votes
1answer
1k views

Multiple SPF domains in SPF DNS record. To MX or not MX?

My understanding of SPF records is that you don’t create two separate ones, but that you include multiple domains in one record with multiple include statements. My company's existing SPF record as ...
0
votes
1answer
43 views

spf records and applications sending emails [duplicate]

I have an application which is supposed to email error codes or confirmation emails to our support email. Using google apps From: Support@mydomain.com to: Support@mydomain.com This software is ...
1
vote
2answers
832 views

Why Are SPF Records Failing?

Ok I've been going through various different sites, resources and topics here trying to figure out what is wrong with my SPF records but no matter what I do they don't seem to pass. Here's what I have ...
0
votes
1answer
110 views

rDNS setup to prevent emails appearing as spam / phishing messages

We are trying to send email without the email appearing in the spam folder. The emails that we are sending is solicited bulk email. The main problem is that the emails are appearing as phishing ...
0
votes
0answers
30 views

Confused about SPF records [duplicate]

Alright, I tried my best to find existing information about this already but wasn't able to find anything. I have a couple of questions: When sending an email using an SMTP server ...
1
vote
1answer
36 views

How to set SPF TXT for this scenario?

I need to add two mailing list servers, in addition to the normal mail servers, to serve two domains. Hopefully any of the two mailing server can send email for any of the two domains. domain ...
0
votes
1answer
272 views

Email authentication without modifying DNS records

Can someone explain how Mailchimp does email authentication without user having to update SPF or DKIM records? Quote from Mailchimp: When you use MailChimp's authentication, campaigns will pass ...
0
votes
1answer
109 views

SPF records, combining suggested records

I have a domain that sends automated email using Amazon SES, regular email using Google Apps and a monthly newsletter using MailChimp. I want to combine the three suggested SPF records into one, but I ...
0
votes
3answers
278 views

Mail from Rackspace virtual host using Google Apps goes to spam

We use Rackspace cloud servers for our applications. Specifically we are running Ubuntu 11.10 and our apps run on a virtual host. We get complaints frequently that our emails (using PHP mail) go ...
0
votes
1answer
73 views

SPF, Sender ID and DKIM signing - Does Sender ID need to be configured if DKIM signing in place?

While learning about SPF, Sender ID and DKIM siging, it seems that Sender ID and DKIM exist to solve similar problems. In addition, Sender ID is discussed in a fairly unflattering light on several of ...
1
vote
1answer
144 views

SPF TXT records - do I need to include sub domains for an outsourced sender SPF record

Say that I want to send mail from my own servers at example.com. As I understand it, I can specify the following SPF record and have any server addressed by an A record under example.com included by ...
0
votes
1answer
128 views

Spam sent from fake email accounts on my domain [duplicate]

One of my clients is getting thousands of "Delivery Status Notification (Failure)" emails per day and it's replied to random email accounts that don't exist on the domain. The content of the emails ...
0
votes
1answer
120 views

How is a sender verified with Gmail's 'Send Mail As' feature?

I have an email account info@example.com with mail.live.com . I also have a Gmail account. I have set up the 'Send mail as' feature in Gmail to send mail as info@example.com, and this works ...
2
votes
3answers
964 views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...