Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

1
vote
1answer
2k views

SPF softfail for forwarded emails to Gmail account

I've been able to make SPF pass on all the sent emails from my Postfix server. But for forwarded domains which simply redirect email to my gmail id I see softfail in the SPF. For example if I send ...
4
votes
3answers
134 views

Will mailing lists “break” if SPF is too restrictive?

I have recently configured my own mail server (Linux-based postfix + dovecot scenario). This is just for personal use - I have no bulk mail going out, no automatically generated mail outbound from the ...
0
votes
1answer
67 views

Unable to make DNS SPF pass for my domain

I've placed this TXT record in the DNS for domain : admissioncourses.com : v=spf1 a mx mx:mail.admissioncourses.com ~all Ideally all I want is that only email sent from admissioncourses.com( and ...
1
vote
2answers
116 views

If I don't want subdomains to send out email, do I need SPF records for them?

I have a main domain with (now) valid SPF record, but we also programmatically create lots and lots of subdomains for clients via cpanel PHPXML API. These subdomains are not intended to send any mail. ...
0
votes
2answers
220 views

SPF record for hostname of postfix instead for every sending domain

I am having a server reachable via server.com that has a postfix mailserver running with the hostname gaia.server.com. Because reverse DNS is only needed for mail purpose (afaik) I changed the reverse ...
0
votes
2answers
72 views

SPF with a Mail Gateway: do I need to put all my mail servers?

I always put all my Mail Servers in SPF declarations, but I'm not sure if this is the correct way to implement SPF. All my mail got routed through a Mail Gateway. Everything goes first to this server ...
2
votes
2answers
59 views

Sending mail from sub-domain on different server from domain getting flagged as spam

Our client owns a server with a domain: website.com We have a server that our client points videos.website.com to. Emails sent from videos.website.com are getting flagged as spam because website.com ...
2
votes
1answer
352 views

DMARC is blocking email that seems like it should be allowed

This is the DMARC record we have set v=DMARC1; p=reject; rua=mailto:[redacted]@coinbase.com; adkim=r; aspf=s So we are rejecting any not match with SPF strictly, and DKIM is relaxed. Here is the ...
-3
votes
1answer
123 views

SPF Records with Subdomains [closed]

Amazon recommends the following SPF Record: "v=spf1 include:amazonses.com -all" However, will this work for SES servers based in EU? eu-west-1.amazonses.com
0
votes
1answer
81 views

PermError SPF Too Many Lookups and Reduction

My current SPF record is as follows: v=spf1 mx include:servers.mcsv.net include:xero.com -all The above cause the SPF validation to fail. Using http://mxtoolbox.com/SuperTool.aspx?action=txt, I ...
0
votes
1answer
112 views

Use greylisting only if SPF fails

I have noticed that more and more people using the DNS based SPF records and I want to enhance my spam filter. I am using SPF and greylisting after each other and my idea would be to use only ...
0
votes
2answers
53 views

How can I fix my Exchange 2007 outgoing mail from being blocked due to SPF

All of a sudden many of my companies emails are being blocked by Hotmail and many others due to SPF. I've added v=spf1 ip4:66.49.60.115 a mx:hpdist.com ~all to my DNS settings as a TXT record. But ...
0
votes
0answers
584 views

553-Message filtered - HELO Name issue?

I am having major issues sending from my SBS2011 machine to Message labs server-13.tower-134.messagelabs.com #553-Message filtered. Refer to the Troubleshooting page at ...
0
votes
1answer
117 views

Dns filezone setup with mx and spf

I am trying to create a mail server. I bought the domain mastermails.info on godaddy.com. I am struggling with the setup of DNS. Whenever I change something in the MX record to make my server ...
1
vote
2answers
3k views

SPF Record - Sender server SPF record permerror

I cannot seem to get a SPF record working for a client of ours, Google mail keeps failing on the lookup. My SPF record is v=spf1 a ip4:80.74.254.215 include:mx1.helloevery1.co.uk ...
0
votes
0answers
85 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
1
vote
2answers
346 views

Setting up SPF records on dedicated server

I have a question in regards to SPF records in a dedicated hosting environment. I wish to set up an SPF record for my dedicated server, but I am not sure whether my understanding is correct. First ...
0
votes
1answer
639 views

Why does the MXtoolbox SPF record checker not like my SPF record? [duplicate]

I have a shared hosting server and have been spilling my brains out trying to find a SPF record that is globally accepted by other hosts. Let's take the domain gimsid.ro. Which can send mail to any ...
2
votes
2answers
2k views

Office365 SPF PermError: Too many DNS lookups

We are migrating from a self hosted mailing platform to Office365 for Businesses. Everything went fine, except for the SPF record. At the moment, we have v=spf1 a mx include:spf.mtasv.net -all as TXT ...
-2
votes
2answers
228 views

AWS SES TXT Record Content

I need to get AWS SES setup for a domain. The registrar's DNS tool only allows me to put in a block of text for the TXT/SPF records (one block per record). I'm not sure how to format the TXT record as ...
1
vote
2answers
2k views

550-Verification failed when forwarding email to some servers

I have a Postfix installed and working with SPF check and SRS-rewriting. When it forwards email for an external address, sometimes its smtp denies relaying the mail with the message: Relay access ...
-1
votes
1answer
447 views

Why does Microsoft's own Sender ID wizard generate a SPF record instead? [closed]

I'm trying to create a Sender ID record for TurboLab.it with Microsoft's own Sender ID wizard but the wizard always return something like v=spf1 a mx ptr ip4:95.141.32.205 -all: this looks like SPF, ...
2
votes
1answer
4k views

How to resolve problems with spf / softfail?

I'm having problems with Google rejecting mail because of SPF problems. I thought I had this fixed, but evidently not... The mail is being sent from a Drupal site running mimemail. A message that ...
1
vote
1answer
357 views

Spf passes or fails depending on receiver address

I have postfix with dovecot set up on Ubuntu 13.10. I send emails via a node application (using email-templates). If I send an email from noreply@mydomain.com to myacccount@gmail.com (email 1), the ...
9
votes
1answer
2k views

Multiple SPF records for multiple domains

We have recently started using Office 365 for our email, which requires us to add a DNS TXT record with the value v=spf1 include:spf.protection.outlook.com -all. We already have an SPF record with the ...
3
votes
2answers
1k views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
6
votes
2answers
1k views

Why is email being delivered normally despite an SPF “hardfail”?

I'm trying to figure out why forged email is being delivered to major email providers (gmail.com, outlook.com) even though email is marked with an SPF hardfail. The email is also delivered to ...
5
votes
1answer
2k views

DKIM and SPF for a subdomain

I manage a VPS on Linode accessed through subdomain.example.com and I need to send email from this subdomain. I can't set any TXT records in Linode DNS manager because the name servers for example.com ...
-2
votes
2answers
131 views

How to properly set TXT SPF record when separating A from MX records [duplicate]

I have current TXT record for my domain: v=spf1 a mx ip4:{ip-of-my-server} -all Both email traffic and website goes to same machine. Now, I have to point website (A record) to other server. Will ...
0
votes
1answer
22 views

Precedence/co-existence of SPF and DKIM

Is co-existence of SPF and DKIM specified somewhere (assuming the absence of DMARC)? I want to put only my own IPs in the SPF and let 3rd parties send mail on behalf of my domain using DKIM. What ...
1
vote
1answer
72 views

spf and dkim records in the same dns zone file

I am trying to set up a mail server which will sign outgoing messages with a dkim signature. Part of that process is to set up a dns record for my senders domain with the public key of the key used ...
1
vote
2answers
187 views

SPF/DKIM Configuration for usage with critsend

I am currently facing the following issue: I have configured a domain of mine to be used with the Critsend mailing service. Their recommended configuration for both SPF and DKIM was implemented on ...
0
votes
2answers
148 views

Email flagged as spam or rejected by recipient mail server

I have configured SMTP service on a windows 2008 server. All the emails sent by the SMTP service are flagged as spam or they are rejected by the recipient of the email. In the header of the email I ...
-1
votes
2answers
2k views

server's email going to spam for yahoo users, possible SPF issue? [duplicate]

Our website is sending out email verifications to members who sign up with our service. Yahoo is throwing our messages in the spam box and displaying this message in the headers: Received-SPF: none ...
1
vote
3answers
1k views

SPF TXT record with multiple senders - bounce back - spf check failed

My company uses office 365 for our email, but we also send email from one of our server's IP addresses. My TXT record is: v=spf1 ip4:XXX.XX.XX.XXX include:spf.protection.outlook.com -all ...
0
votes
1answer
362 views

hMailServer forwarding and distribution lists with SPF checking

I have installed and configured hMailServer, primarily to allow me to create a distribution list for a private organisation, and some email address aliases. This is so that members of the ...
0
votes
1answer
40 views

Google gmail block for no ptr of 4to6 ip address

When mail server got only ipv4 address and enabled 4to6 interface, gmail server block mail because of no ptr record of 4to6 address. Why...? Isn't 4to6 address not global standard...?
0
votes
0answers
380 views

SPF Check Failing Because Yahoo and Hotmail Looking for Zone File For Hostname

I have set up an SPF record that passes gmail's SPF record check, but not hotmail, yahoo, port25.com, isnotspam.com, or openspf.net. I believe the SPF record is properly set up for my domain, ...
2
votes
2answers
189 views

include:_spf.google.com not enough for hotmail

My spf is neland.dk descriptive text "v=spf1 a:mail6.paradiss.dk a:min.moar.dk a:arnold.neland.dk include:_spf.google.com -all" I get this error when sending from gmail.com as leif@neland.dk ...
7
votes
1answer
3k views

Is it OK to have multiple TXT records for a single domain containing different SPF entries?

A remote recipient domain is rejecting mail on the grounds of SPF and I think it's because the sender has SPF configured incorrectly. When I run dig, I see: [fooadm@box ~]# dig @8.8.8.8 -t TXT ...
1
vote
1answer
251 views

gmail contacts IP from SPF and fails to send mail to some domains

I have strange problem with my SPF records and gmail MX. I have this SPF setup v=spf1 a mx ip4:IP1 ip4:IP2 include:_spf.google.com ~all In this case, if I send an email to two specific domains, ...
1
vote
2answers
51 views

Is there any difference between different ways of expressing the same information in an SPF record?

I have a domain at example.com. The MX record is 10 cp.example.net. These domains are on two different IP addresses. Let's say that example.com is on 198.51.100.0, while example.net and cp.example.net ...
0
votes
1answer
116 views

DNS Redirect Website to another Server

I have two servers, server 1 and server2. The name serververs of the domain points to server1. 1.I have this configuration regarding Server1 DNS Zones: domain.com. 1200 IN A server2-ip Edit ...
0
votes
1answer
56 views

What to look for when using a 3rd party Email Enrichment Service - to secure our emails? [closed]

Our marketing team wants to use a 3rd party Email Enrichment Service. I want to try and tackle this, as I don't like the idea that my mail will go through a certified service and exposed. I know ...
0
votes
1answer
94 views

How does SPF reduce backscatter with a Google Apps account

Reading up on the SPF spec, I understand that SPF designates certain IPs as valid sender SMTP server IPs. For Google Apps, the SPF record is supposed to be v=spf1 include:_spf.google.com ~all. The ...
1
vote
1answer
906 views

Configuring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP servers

Today we realized that all of our emails being sent to email addresses of the type <username>@corporatedomain.com were getting rejected. I don't know who is hosting the email for ...
10
votes
2answers
2k views

Office365 SPF record has too many lookups

For some utterly ridiculous administrative reasons we've got a split domain with one mailbox on Office365 which requires us to add include:outlook.com to our SPF record. The problem with this is that ...
0
votes
1answer
122 views

Icinga notifications are being marked as spam when sent to my mailbox

I'm using gmail and my domain is foo.com About half the notifications from my icinga server, icinga@foo.com go to my spam folder for me@gmail.com Received-SPF: fail (google.com: domain of ...
1
vote
2answers
996 views

TinyDNS and proper settings for SPF records [duplicate]

I've inherited a TinyDNS configuration that have following entries for SPF: @domain.com:x.x.x.3:a::86400 @domain.com:x.x.x.103:c:10:86400 =domain.com:x.x.x.3:86400 =mail.domain.com:x.x.x.3:86400 ...
1
vote
1answer
449 views

Failure notice with my mail server, what to do?

I've build a simple Mail server for my personal use, but Google reject my emails whatever I do. I worked hard finding the initials problems (wrong SPF entries in the DNS), but now, everything seems ...