Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

3
votes
1answer
108 views

exim4 configuration with SRS daemon

I'm struggeling setting up exim 4 with an external SRS daemon (Debian package srs). The srsd is running and converting addresses back and forward just fine. I can't use exim's built-in srs code, since ...
1
vote
2answers
104 views

What are the implications of inserting a DKIM record for a third party sending email on our behalf?

Our organization is setting up an account with a third party cloud service that will be sending emails on our behalf. Our marketing department would like to eliminate the "via" or "on behalf of" bits ...
-1
votes
1answer
217 views

How to setup postfix to check SPF record only for domains that i want to check

I have working postfix server. It configured with amavis and uses pretty good SMTP headers control. But sometimes my users receive spam from spammers with well known mail service providers addresses. ...
0
votes
1answer
81 views

SPF, SRS and aliases on Gmail and other external services

A lot of my mailservers users are using Gmail to send with an address on my domain as their alias. In an attempt to combat e-mail forgery I have implemented an SPF record and have been advised to ...
2
votes
1answer
281 views

SPF permerror reported by Hotmail

Our server has been receiving abuse reports from Hotmail, because of an auth-failure. One of our sending servers has been blacklisted and Hotmail is refusing delisting. We have investigated a lot, and ...
2
votes
1answer
81 views

SPF record is showing up unchanged after several days

I need to change my SPF record, but the one that Kitterman shows as being the present SPF record is not visible on my DNS server. OLD ONE: v=spf1 a mx include:e2ma.net ~all I added the new one and ...
2
votes
1answer
66 views

Using SPF for spoof protection

I'm trying to work through properly configuring SPF for my domain. We have two MX servers that only receive mail, and two outbound relay servers which we expect to list in our SPF record. We also ...
1
vote
2answers
59 views

Setting up SPF and initial questions [duplicate]

I'm trying to set up SPF for our domain to prevent or reduce spoofing. The difficulty I'm having is with how to look at any particular email and determine if it would pass SPF. We of course know ...
1
vote
3answers
415 views

SPF and DKIM help: Do the FAIL reports from DMARC indicate an issue?

I am having trouble determining if my SPF and DKIM are configured properly. Here are key details: My domain is mysteryscience.com We send mail from google apps, from SendGrid, and from Intercom. All ...
-2
votes
4answers
455 views

Setting up an SPF record for a shared hosting service with lots of email gateways

My website is on a Hostgator shared host, and I need to set up SPF for my email so my outgoing emails won't get bounced. So, I have to add a TXT record to the DNS for my domain, listing all possible ...
8
votes
3answers
2k views

Do changes in SPF records take time to propagate?

I'm setting up SPF records for my domain, and am not getting the results that I expect. It's quite possible I'm making some sort of mistake, but first I'd like to ask: does it take time for the ...
1
vote
2answers
78 views

SPF-record / E-mail marked as spam in Gmail [solved]

E-mail send from my own e-mail (example@domain.nl) to a Gmail-account is marked as spam. When I view the e-mail headers you will see a softfail. I have tried to set the SPF-record for my domain, but I ...
0
votes
2answers
48 views

How should I configure SPF for my domain? [duplicate]

I'm the domain administrator for, say, example.com. I have a few dozen users and we provide them with e-mails (first-name@example.com) that are aliases to their main e-mail. Now there's quite a few ...
0
votes
0answers
94 views

SPF Not Being Recognized

I'm working on setting up a VPS on Vultr (Ubuntu 14.04). The hostname is setup on the server as host2.sethta.com. I've almost got everything setup how I want, but Google is rejecting emails from the ...
0
votes
1answer
75 views

Google Apps email messages being flanged as “failed fraud detection” on outlook [duplicate]

mx entries for gmail and spf code for gmail is in place on cpanel however every time I try and send an email from my google apps account it gets picked up as fraud on outlook, and spf=softfail (if ...
-1
votes
2answers
27 views

Creating a host record for an IP address to be used for SPF [duplicate]

I would like to allow an email service to be a valid sender for my domain. This service has dedicated a single IP for my account. Instead of: v=spf1 ip4:1.2.3.4 -all Will the following behave the ...
2
votes
1answer
525 views

What does dis=NONE mean in an email's Authentication-Results header?

The following is from an email I received recently: Authentication-Results: mx.google.com; spf=neutral; dkim=pass header.i=@yahoo.com; dmarc=pass (p=REJECT dis=NONE) ...
1
vote
1answer
84 views

Email redirected to Gmail contains failed SPF

I have an email account on my domain, e.g adrian@mysite.com And on my dedicated server mysite.com I redirect messages from adrian@mysite.com to adrian@gmail.com Now, if an external user like ...
3
votes
1answer
5k views

IP address is not allowed to send mail from DOMAIN

Today I heard that a customer can't send email to us. He received the following error: < #5.5.0 smtp;550 [ipaddress] is not allowed to send mail from [domain name]. Please see ...
11
votes
3answers
1k views

Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record?

As a hosting provider, we send email on behalf of our clients, so we help them set up DKIM and SPF email records in their DNS to get email deliverability just right. We've been advising them to use ...
0
votes
1answer
127 views

Force PHP mail to avoid using postfix root@myorigin; use /etc/mailname instead?

I recently posted an issue setting up a mail server with postfix and virtual aliases. I solved the problem here: Postfix/Dovecot - Multiple Domains and Multiple Linux Accounts To sum it up, I set ...
0
votes
1answer
142 views

Google softfail when sending between accounts on same domain

I'm dealing with this for almos a month. Tried several changes but no luck. Some users manage their e-mail addresses through standard Gmail. NOT Google Apps. Their accounts were configured as ...
-2
votes
1answer
32 views

subdomains and SPF failures

I have recently moved some of my e-mail services to sub-domains (sub1.company.com, sub2.company.com) because the SPF of the main domain - company.com got full (lot's of includes and there is more ...
1
vote
2answers
41 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
0
votes
0answers
11 views

Proper records for mail and domain [duplicate]

I am having the following question: I have a domain (let's say example.com) and I need to set up the proper records for the e-mail so that to minimize the possibility for a message to go to spam. I am ...
2
votes
1answer
264 views

Only enable SRS when forwarding to enable DMARC

I am setting up a mail server on my VPS and in order to prevent spam and being marked as spam I have enabled SPF, DKIM and DMARC. However, I do not want to host my own mailbox, so I forward the ...
0
votes
2answers
83 views

SPF - Adding lots of IPs

I have 8 IPs in different ranges to add to my SPF records. All are subdomains mta1.domain.com mta2.domain.com and so on. I can't add each IPv4 to domain.com txt due to limitations. How else can I ...
0
votes
0answers
56 views

Difficulty with second domain in an SPF Record (not allowed use email addy)

I'm kinda out of my element here so please forgive me. I have read and googled several spf post and troubleshooting tips but I can't quite figure out what I'm missing. My test email is failing ...
1
vote
1answer
115 views

What is the best way to harden a postfix null client on an exploited php webserver?

We use postfix as a null client to send out mail from a php webserver via sendmail. We host our incoming mail servers elsewhere and use a SPF record to authorise the server to send emails from our ...
1
vote
0answers
104 views

New Exchanger Server installation - Email marked as spam on hotmail/outlook

New to the email hosting scene - running an Exchange 2013 box. Email is always (literally, always) marked as spam when sending out to my outlook.com account. Whereas if its sent to an email address ...
0
votes
0answers
54 views

SPF record getting soft failed due to dynamic ip

The SPF soft fail error I'm getting is: Received-SPF: softfail (google.com: domain of transitioning noreply@example.com does not designate 64.202.189.129 as permitted sender) ...
1
vote
1answer
68 views

SPF record not being detected by gmail

I recently added SPF record to my server & it passes all the results required. However sending email doesn't detect SPF record. The method I use to detect is whether gmail shows 'mailed-by'. I ...
1
vote
0answers
629 views

Mail marked as spam (Gmail/Hotmail): IP not on blacklist, DKIM Valid, SPF Valid and DMARC valid

I'm trying to send mail from my own domain (which is 15 days old now) but I'm having some troubles. Check the following mail body: Delivered-To: ------@gmail.com Received: by 10.25.89.200 with SMTP ...
2
votes
2answers
174 views

Postfix header stating wrong IP

I am using Postfix 2.11.3 on Debian 8.0 I configured Postfix to run multiple instances (3), one for each public IP connected to our server in order to balance outgoing traffic depending on the ...
2
votes
1answer
31 views

SPF record for MX records?

I am maintaining the DNS records of a domain which was set up by someone else. I have following RRs (visible in an webinterface): example.com A 1.2.3.4 example.com MX 10:mail.example.com example.com ...
1
vote
0answers
194 views

SFP + Gmail = Emails delivered to spam box

A long time ago I posted a question here: Postfix: Gmail marking my email as spam where I said that although emails send from my servers were passing all the DKIM and SPF tests they were getting ...
0
votes
1answer
141 views

Using PTR on SPF Record and Multiple Domain Pointing Single Server

Today I've checked my SPF is valid on some of the sites and invalid on some of the sites I've tested. Microsoft also couldn't see my SPF record for some reason while others can. (Sender ID ...
0
votes
2answers
839 views

SPF check failure but cannot pinpoint issue (newbie)

I sent a test email using the port25.com email verification tool and got back the results below in it's entirety. Can someone tell me what is missing and why SPF is failing? Many thanks! -sul. This ...
1
vote
0answers
347 views

SMTP error : Remote host said: 550 5.7.1 At least one FROM header address not allowed to send mail from IP ADDRESS

We are developing an email sending app, and we allow our users to specify the From: header their emails will be sent from. Let's say our domain is mydomain.com and our client domain is ...
1
vote
2answers
492 views

Spam delivered by mx.google.com despite SPF fail

Some spammer use our e-mail address as sender in forged e-mails. Now we got thousands of bounced messages from no longes existing e-mails. We set up SPF and DKIM records but it does not stop. ...
1
vote
0answers
25 views

How to troubleshoot marketing e-mail inbox rate / deliverability? [duplicate]

After previously using managed ESP's, we've recently switched over to our own server (CentOS 6) that's set up to send bulk e-mails with 12 IPs/SPF/DKIM. Campaigns are processed and sent via ...
2
votes
1answer
52 views

SPF records clarification of using A mechanism

What is the difference between using v=spf1 a ~all and v=spf1 ip4:IP_OF_A_RECORD ~all or v=spf1 IP_OF_A_RECORD ~all when configuring SPF records? Which way is correct and more robust and reliable?
1
vote
1answer
49 views

Originating (non-critical) emails from a “less-trusted” host

Background We have a webapp running on webapp.example.com that (amongst other things) sends messages by email from time to time. These messages are non-critical: whilst we would like to make a best ...
3
votes
0answers
152 views

SPF check based on client IP instead of MTA IP?

Setup On a client computer with IP address a.a.a.a, there is a mail client that uses SMTP to send emails via company email server example.com with IP address b.b.b.b. The company email server ...
6
votes
2answers
2k views

Route 53 - Should I duplicate my SPF records as TXT records?

Amazon Route 53 supports both "SPF Records" and "TXT Records". Most documentation I read tells me to list my SPF Record as a TXT Record. I understand that the SPF Record is a newer standard. Is it ...
0
votes
1answer
47 views

Proper Setup of SPF Record

OK, so, i'm only so familiar with how the SPF system works, and my domain is being used to send all kinds of spam. Here is my current spf record: v=spf1 ip4:web.host.ip ip4:108.60.203.190 +a +mx ...
2
votes
2answers
328 views

Gmail ignoring SPF record

I have a domain whose SPF record looks like this: "v=spf1 mx ip4:6.7.8.9 -all". The record is valid, and to my understanding implies that allow mails only from: The server that is MX record for the ...
-1
votes
2answers
119 views

AWS: Kitterman SPF record test failing

I have had a couple of emails not arrive in my inbox. One resent the email and I received it, the other told me that the error was: non valid MX response I have been looking at my AWS SPF records and ...
7
votes
3answers
213 views

Does “~all” in the middle of an SPF record signal the end of the record when it is parsed?

Our company's SPF record format is as follows: "v=spf1 include:_spf.google.com ~all a mx ip4:X.X.0.0/23 include:spf.example.com ?all" So we have an "~all" in the middle of our SPF record. On the ...
1
vote
1answer
216 views

Conflict between wildcard DNS entry and SPF

I have a domain set up on Amazon's Route53, and it seems the following entries are not going to work (actual values replaced, obviously). Can anyone advise on how this should be set up? This is the ...