Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

1
vote
1answer
248 views

Spf passes or fails depending on receiver address

I have postfix with dovecot set up on Ubuntu 13.10. I send emails via a node application (using email-templates). If I send an email from noreply@mydomain.com to myacccount@gmail.com (email 1), the ...
6
votes
1answer
880 views

Multiple SPF records for multiple domains

We have recently started using Office 365 for our email, which requires us to add a DNS TXT record with the value v=spf1 include:spf.protection.outlook.com -all. We already have an SPF record with the ...
3
votes
2answers
837 views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
6
votes
2answers
889 views

Why is email being delivered normally despite an SPF “hardfail”?

I'm trying to figure out why forged email is being delivered to major email providers (gmail.com, outlook.com) even though email is marked with an SPF hardfail. The email is also delivered to ...
5
votes
1answer
1k views

DKIM and SPF for a subdomain

I manage a VPS on Linode accessed through subdomain.example.com and I need to send email from this subdomain. I can't set any TXT records in Linode DNS manager because the name servers for example.com ...
-2
votes
2answers
119 views

How to properly set TXT SPF record when separating A from MX records [duplicate]

I have current TXT record for my domain: v=spf1 a mx ip4:{ip-of-my-server} -all Both email traffic and website goes to same machine. Now, I have to point website (A record) to other server. Will ...
0
votes
1answer
21 views

Precedence/co-existence of SPF and DKIM

Is co-existence of SPF and DKIM specified somewhere (assuming the absence of DMARC)? I want to put only my own IPs in the SPF and let 3rd parties send mail on behalf of my domain using DKIM. What ...
1
vote
1answer
60 views

spf and dkim records in the same dns zone file

I am trying to set up a mail server which will sign outgoing messages with a dkim signature. Part of that process is to set up a dns record for my senders domain with the public key of the key used ...
1
vote
2answers
146 views

SPF/DKIM Configuration for usage with critsend

I am currently facing the following issue: I have configured a domain of mine to be used with the Critsend mailing service. Their recommended configuration for both SPF and DKIM was implemented on ...
0
votes
2answers
106 views

Email flagget as spam or rejected by recipient mail server

I have configured smtp service on a windows 2008 server. All the emails sent by the smtp service are flagged as spam or they are rejected by the recipient of the email. In the header of the email I ...
-1
votes
2answers
1k views

server's email going to spam for yahoo users, possible SPF issue? [duplicate]

Our website is sending out email verifications to members who sign up with our service. Yahoo is throwing our messages in the spam box and displaying this message in the headers: Received-SPF: none ...
1
vote
3answers
1k views

SPF TXT record with multiple senders - bounce back - spf check failed

My company uses office 365 for our email, but we also send email from one of our server's IP addresses. My TXT record is: v=spf1 ip4:XXX.XX.XX.XXX include:spf.protection.outlook.com -all ...
0
votes
1answer
297 views

hMailServer forwarding and distribution lists with SPF checking

I have installed and configured hMailServer, primarily to allow me to create a distribution list for a private organisation, and some email address aliases. This is so that members of the ...
0
votes
1answer
36 views

Google gmail block for no ptr of 4to6 ip address

When mail server got only ipv4 address and enabled 4to6 interface, gmail server block mail because of no ptr record of 4to6 address. Why...? Isn't 4to6 address not global standard...?
0
votes
0answers
295 views

SPF Check Failing Because Yahoo and Hotmail Looking for Zone File For Hostname

I have set up an SPF record that passes gmail's SPF record check, but not hotmail, yahoo, port25.com, isnotspam.com, or openspf.net. I believe the SPF record is properly set up for my domain, ...
2
votes
2answers
146 views

include:_spf.google.com not enough for hotmail

My spf is neland.dk descriptive text "v=spf1 a:mail6.paradiss.dk a:min.moar.dk a:arnold.neland.dk include:_spf.google.com -all" I get this error when sending from gmail.com as leif@neland.dk ...
6
votes
1answer
3k views

Is it OK to have multiple TXT records for a single domain containing different SPF entries?

A remote recipient domain is rejecting mail on the grounds of SPF and I think it's because the sender has SPF configured incorrectly. When I run dig, I see: [fooadm@box ~]# dig @8.8.8.8 -t TXT ...
1
vote
1answer
214 views

gmail contacts IP from SPF and fails to send mail to some domains

I have strange problem with my SPF records and gmail MX. I have this SPF setup v=spf1 a mx ip4:IP1 ip4:IP2 include:_spf.google.com ~all In this case, if I send an email to two specific domains, ...
1
vote
2answers
49 views

Is there any difference between different ways of expressing the same information in an SPF record?

I have a domain at example.com. The MX record is 10 cp.example.net. These domains are on two different IP addresses. Let's say that example.com is on 198.51.100.0, while example.net and cp.example.net ...
0
votes
1answer
109 views

DNS Redirect Website to another Server

I have two servers, server 1 and server2. The name serververs of the domain points to server1. 1.I have this configuration regarding Server1 DNS Zones: domain.com. 1200 IN A server2-ip Edit ...
0
votes
1answer
54 views

What to look for when using a 3rd party Email Enrichment Service - to secure our emails? [closed]

Our marketing team wants to use a 3rd party Email Enrichment Service. I want to try and tackle this, as I don't like the idea that my mail will go through a certified service and exposed. I know ...
0
votes
1answer
87 views

How does SPF reduce backscatter with a Google Apps account

Reading up on the SPF spec, I understand that SPF designates certain IPs as valid sender SMTP server IPs. For Google Apps, the SPF record is supposed to be v=spf1 include:_spf.google.com ~all. The ...
1
vote
1answer
734 views

Configuring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP servers

Today we realized that all of our emails being sent to email addresses of the type <username>@corporatedomain.com were getting rejected. I don't know who is hosting the email for ...
9
votes
2answers
1k views

Office365 SPF record has too many lookups

For some utterly ridiculous administrative reasons we've got a split domain with one mailbox on Office365 which requires us to add include:outlook.com to our SPF record. The problem with this is that ...
0
votes
1answer
114 views

Icinga notifications are being marked as spam when sent to my mailbox

I'm using gmail and my domain is foo.com About half the notifications from my icinga server, icinga@foo.com go to my spam folder for me@gmail.com Received-SPF: fail (google.com: domain of ...
1
vote
2answers
829 views

TinyDNS and proper settings for SPF records [duplicate]

I've inherited a TinyDNS configuration that have following entries for SPF: @domain.com:x.x.x.3:a::86400 @domain.com:x.x.x.103:c:10:86400 =domain.com:x.x.x.3:86400 =mail.domain.com:x.x.x.3:86400 ...
1
vote
1answer
425 views

Failure notice with my mail server, what to do?

I've build a simple Mail server for my personal use, but Google reject my emails whatever I do. I worked hard finding the initials problems (wrong SPF entries in the DNS), but now, everything seems ...
6
votes
4answers
1k views

Why does my mail get marked as spam?

I Have the server "afspraakmanager.be". It matches everything not to be a spam server.(it isn't by the way): it has reverse dns, spf,dkim,... . But hotmail marks it as spam. I think the problem is ...
0
votes
1answer
354 views

SPF + ISP Smarthost, always untrusted?

One of the ways mail-servers protect themselves from spam is by SPF-records, a DNS look-up saying what ip-adresses are allowed to send mail from a given domain name. Another way the mail-servers use ...
2
votes
1answer
142 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
2
votes
1answer
104 views

SPF record validation - best guess only

I administrate the domain [mydomain.com] which was until now only used for handling mail through Google Mail/Google Apps. Now I added a server which should be part of the domain without changing the ...
0
votes
1answer
95 views

Should I put SPF checks before or after RBL checks in Postfix SMTP server?

I am setting up a Postfix SMTP server (pre v2.10) and was thinking to put the smtpd_recipient_restrictions as follows. smtpd_recipient_restrictions= permit_mynetworks, ...
2
votes
1answer
622 views

Using “mx ptr” parameters in DNS SPF record

I'm trying to set up my SPF record to validate properly both for emails sent through Google Apps and for those sent from MailChimp's servers. MailChimp's docs recommend this SPF record: v=spf1 mx ptr ...
0
votes
1answer
137 views

What will be the SPF entry in DNS?

We are using magento on our server. Magento sent transactional emails directly from our server using php mail function, along with this we are using third party webmail service. Means our mx entry ...
0
votes
1answer
1k views

Assistance diagnosing SenderID PermError in Exchange 2010

We're having issues with a customer's domain. They're wanting to do a mail-out with a service called Act-On, and so far all the tests seem to be getting flagged as spam. The customer has tried ...
0
votes
2answers
2k views

Combining multiple SPF records - SenderID - kind of lost

Tried to read up on SPF record creating but I am a bit lost. I need to combine and create an SPF record because our email is not getting through. Here are the ways we send email: Daily ...
5
votes
3answers
4k views

Why is my email failing Gmail's DKIM test?

I have a message that was rejected by Gmail, I don't know why. It passes SPF. We aren't using DKIM. Do I need to set up DKIM? I am in control of "example.com". Our mail server is "server.example.com" ...
0
votes
2answers
368 views

How to setup spf1 record Using Cloudflare, outlook.com and sending mail directly from php server?

I have a web server with a community website on it, and 1 subdomain on another ip. I use Cloudflare, and made outlook.com handle my mail for me. However my web server also sends mail. For example, a ...
0
votes
1answer
51 views

SPF record configuration [duplicate]

I am a bit confused about the creation of SPF records. I have my hosting domain: hosting.mydomain.com, this is the hostname of the actual server running postfix etc. I have configured my DNS like ...
0
votes
1answer
35 views

Next Step in Migrating Exchange 2003 to GMail (SPF risks when changing MX record vs disable SMTP)

Our company has been struggling to migrate Exchange to GMail for last 2 years (I will leave this for /r/talesfromtechsupport). We have two domains on two different ccTLDs, and lately Exchange is just ...
1
vote
2answers
414 views

SPF: Difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all

What is the difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all (the first one is with underline character in front of the spf, the second one without)
0
votes
3answers
369 views

SPF Records for QuickBooks Online

QuickBooks online sends email from the email address listed on the account. This is always going to be the email address of the business rather than an email address that Intuit have permission to ...
2
votes
1answer
79 views

How to control the originating IPv6 of emails sent by postfix?

In a VPS with 2 IPv4 and 16 IPv6, I send emails with postfix. Each time, the email is sent from one of the IPs randomly Received: from domain.com (a random IPv6 out of my 16 IPv6) Thus, SPF fails ...
1
vote
1answer
304 views

SPF: softfail (domain of transitioning email does not designate 2a01:4f8:121:2062::2 as permitted sender)

I am seeing this SPF softfail for emails sent from my server, and I notice that 2a01:4f8:121:2062::2 is an IPV6 address. When I check 2a01:4f8:121:2062::2 it is translated as 0.0.0.2 ipv4, so that ...
1
vote
1answer
103 views

How to choose email SPF qualifier?

I'm helping manage a domain that seems to have been given a bad reputation spam-wise, as we get a lot of emails bounced. I am told that it's suspected the domain has been used by spammers to send ...
0
votes
2answers
376 views

Mail goes to spam when using `mail` from command line

I've a CentOS 6.4 server with DirectAdmin. When I send an email using the mail command from command line, it's always marked as spam by Gmail. So, every system emails go to spam and so do every emails ...
1
vote
2answers
1k views

Why does Google reject my outgoing emails?

I have the following DNS records set up for my mailserver (obfuscated Domain and IPs): mydomain.net. 86400 IN A 109.83.50.87 mydomain.net. 86400 IN AAAA ...
3
votes
1answer
5k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
0
votes
1answer
160 views

Add multiple domain/IPs to SPF record to support google and third part senders [duplicate]

We are using Google Apps as email provider and have added following SPF record for our domain v=spf1 a mx ptr include:_spf.google.com -all We also use LivePerson as a support system and when they ...
0
votes
1answer
247 views

Mail marked as spam with SPF record allowing server's ipv4 but not ipv6

This question is mostly out of curiosity as I have now updated the SPF record to include the ipv6 address. I have a server and I tested its php email sending ability by sending myself an email from ...