Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

4
votes
2answers
359 views

Blackberry & SPF

Some users on my domain use a Blackberry for email. Should Blackberry's servers be included somehow in my SPF record? Thank you much for any advice.
4
votes
2answers
2k views

SPF hardfail and DKIM failure when recipient has e-mail forwarding

I configured hardfail SPF for my domain and DKIM message signing on my SMTP server. Since this is the only SMTP server that should be used for outgoing mail from my domain, I didn't foresee any ...
4
votes
2answers
292 views

SPF Record with or without plus

Is there any difference between v=spf1 +a +mx -all and v=spf1 a mx -all I am unsure if they do the same thing or somthing different. Clarification would be great. Thank you
4
votes
2answers
155 views

Email Server Validation Website

When sending emails I want my server to have DomainKeys and SPF records setup records correctly, is there a website I can email that does validation of my DomainKeys and SPF records?
4
votes
3answers
2k views

How to reject/detect emails claiming to be from my own domain?

We have following e-mail topology: Exchange server --------- Sendmail server ---------------Internet On sendmail server there is no any user mailbox and messages with sender address ...
4
votes
3answers
162 views

TXT record for a server behind a router?

I've found this wonderful explanation of SPF on http://www.openspf.org/SPF_Record_Syntax and i had it working on my older setup. Setup has changed and i find myself in the ropes again. I have an ...
3
votes
1answer
4k views

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com ...
3
votes
7answers
7k views

all mails going to gmail SPAM (sendmail on centos) 127.0.0.1 problem?

UPDATE ON SPF CHECK http://www.openspf.org/Why: The SPF check gives me this: An SPF-enabled mail server rejected a message that claimed an envelope sender address of support@ourdomain.com. An ...
3
votes
1answer
496 views

How did this email bypass my SPF settings?

I received a phishing email this morning that appeared to come from one of my addresses to itself. Looking at the headers, I found something interesting. DomainKey-Status: no signature ...
3
votes
2answers
2k views

hotmail blacklist and rDNS questions

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story. After the VPS was purchased we started receiving bouncebacks with ...
3
votes
2answers
1k views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
3
votes
2answers
1k views

policyd-spf is rejecting mail with '?all' SPF records

One of our clients is getting mail rejected from one of his customers. The sender's SPF record is: v=spf1 +a +mx +ip4:12.34.56.78 ?all The mail is not originating from 12.34.56.78, but AFAIU the ...
3
votes
3answers
3k views

13 IP addresses, how to add them to domain SPF?

Let say I have these IP addresses on my server: 170.120.210.209 gateway 170.120.210.210 server IP 170.120.210.211 170.120.210.212 170.120.210.213 170.120.210.214 170.120.210.215 170.120.210.216 ...
3
votes
1answer
243 views

Port25.com SPF test fails, gmail SPF pass

When testing my SPF record using port25.com's nifty little tool by sending an email to check-auth@verifier.port25.com I get the following FAIL result: ...
3
votes
2answers
105 views

Will this SPF record restrict delivery of email for the original domain?

As part of the product we offer we send emails on behalf of our clients. Because the emails don't come from an IP associated with the client they are sometimes flagged as spam. We advised some of our ...
3
votes
5answers
4k views

Hotmail Sender ID always fails with “temperror” regardless of SPF

When we send mail to Hotmail servers, they do not recognize our Sender ID. In the receiving mail source, it reads Authentication-Results: hotmail.com; sender-id=temperror ... when it should say pass ...
3
votes
2answers
2k views

Gmail flagging emails as spam despite SPF being enabled and working perfectly

I have a website where people can recommend contents to their friends using their email. The issue is that emails are being flagged as spam whereas if I do the same from my development machine things ...
3
votes
2answers
1k views

SPF Setup - Sending from VPS and Google Apps

In follow up to my question here, how on earth do I setup a SPF record?!? I understand that I have to add a TXT record to my DNS entries but what to put in that TXT entry is what's confusing me... I ...
3
votes
2answers
310 views

Mixing SPF records

I have the usual Google Apps SPF record in my DNS: v=spf1 include:_spf.google.com ~all and now, since we are using ZenDesk, I should also add: v=spf1 include:support.zendesk.com ~all Should they ...
3
votes
3answers
289 views

Testing a mail server / server not making it to recipient

We have a Drupal website on a Linux server, it is using mail() to send mail through PHP. I think that would be using PHPmailer and sendmail. Domain is www.myclientdomain.com and we can receive email ...
3
votes
1answer
830 views

SPF problems with Google Apps

I currently have an SPF record with a hostname of @ that is: v=spf1 mx ip4:x.x.x.243/32 include:_spf.google.com include:amazonses.com ~all I also have another record of" spf2.0/pra mx ...
3
votes
6answers
4k views

Hotmail and Live.com rejecting all emails

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
3
votes
1answer
57 views

Why am I getting these emails?

Awhile ago I noticed that email messages from my domain is not immediately delivers by google, and I'm getting an smtp error message from google server. I don not remember the exact wording of that ...
3
votes
1answer
32 views

SPF record for my domain is not being detected

I have a domain (qplum.co) set up at NameCheap. I am trying to set a TXT record for setting up SPF for Mandrill but for some reason, this record is not being detected at all by any of the tools. This ...
3
votes
1answer
6k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
3
votes
3answers
7k views

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that ...
3
votes
5answers
3k views

Google Apps e-mail being rejected from some domains

I'm migrating e-mail for my domains to Google Apps' e-mail. Most everything seems to work except e-mail sent to any user at (at least) sonic.net is rejected with a message of the form (where ...
3
votes
1answer
129 views

What value does SenderID provide over SPF and DKIM?

I understand that SPF "binds" a message envelope to a set of permitted IP addresses. SenderID (with the default pra option) "binds" the message header to a set of permitted IPs in addition to the ...
3
votes
1answer
1k views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "joe@domainA.org" and the Envelope ...
3
votes
1answer
170 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
2
votes
2answers
281 views

What are SPF records and how are they related to emails?

I changed the hosting of a website and their email is hosted with another company. There is also an SPF record for that host. What is the function of that SPF record?
2
votes
3answers
3k views

How to set SPF record?

I have configured postfix to use mail.example.com I have many virtual domains, like: domain1.com domain2.com domain3.com My question is, how to set the SPF? Do I have to set SPF for each domain ...
2
votes
2answers
256 views

The +a part of SPF records

I just want to clarify the +a part of an SPF record since I have an idea how this works but I am unsure. spf record for example.com v=spf1 +a -all My current understanding is that if there is a ...
2
votes
2answers
2k views

Office365 SPF PermError: Too many DNS lookups

We are migrating from a self hosted mailing platform to Office365 for Businesses. Everything went fine, except for the SPF record. At the moment, we have v=spf1 a mx include:spf.mtasv.net -all as TXT ...
2
votes
2answers
144 views

Do I need to Set-up PTR record in SPF Setting?

I have set-up the RDNS from my hosting provider for the ip address to resolve to "maximus.example.com". After that, do I also need to add the PTR records to the SPF Text details in my DNS zone file as ...
2
votes
2answers
59 views

Sending mail from sub-domain on different server from domain getting flagged as spam

Our client owns a server with a domain: website.com We have a server that our client points videos.website.com to. Emails sent from videos.website.com are getting flagged as spam because website.com ...
2
votes
1answer
126 views

Is this SPF record valid?

I just want to confirm if my SPF record is valid : v=spf1 ip4:66.46.182.1/24 ip4:206.132.164.176/24 ip4:23.21.63.174 -all Will 2 ip ranges and a specific ip on one line valid?? Thanks in advance.
2
votes
2answers
3k views

Forward Mails to Gmail

I have a postfix mailserver running. Mails sent from users to Gmail are showing up in Gmail, so it works in general. Same for all other freemail hosts I know. The problem is that some users have no ...
2
votes
1answer
4k views

How to resolve problems with spf / softfail?

I'm having problems with Google rejecting mail because of SPF problems. I thought I had this fixed, but evidently not... The mail is being sent from a Drupal site running mimemail. A message that ...
2
votes
2answers
192 views

include:_spf.google.com not enough for hotmail

My spf is neland.dk descriptive text "v=spf1 a:mail6.paradiss.dk a:min.moar.dk a:arnold.neland.dk include:_spf.google.com -all" I get this error when sending from gmail.com as leif@neland.dk ...
2
votes
1answer
203 views

SFP Validation: Neutral - after explicitly adding servers to TXT (and SPF) record

I can't get a pass on the emails coming from my application servers :( - I have 2 I am using http://tools.bevhost.com/spf/ to validate my newly minted SPF records. It has the following to say: pass ...
2
votes
2answers
239 views

SPF record for Gmail?

I have DNS, with a SPF TXT record, configured for a domain name. The primary user of the domain name now needs to be able to send both from our SMTP servers, and also from her GMail account. I've seen ...
2
votes
2answers
2k views

Setting an SPF record for all subdomains of my domain

Is this possible? Like a wildcard TXT record of some sort?
2
votes
2answers
55 views

Order emails from online shop not delivered due to SPF errors

I have my domain served by two servers with different IP addresses: one for main website and another for online shop. When a customer places an order, among other things, an email is being sent to an ...
2
votes
1answer
763 views

Using “mx ptr” parameters in DNS SPF record

I'm trying to set up my SPF record to validate properly both for emails sent through Google Apps and for those sent from MailChimp's servers. MailChimp's docs recommend this SPF record: v=spf1 mx ptr ...
2
votes
3answers
2k views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...
2
votes
3answers
1k views

CNAME domain to another domain, but keep different SPF records for the two?

SCENARIO: mydomain.com is the main website, we do send/receive mail using address@mydomain.com. mydomain.com DNS has got an SPF record "v=spf1 a mx ~all" mydomain.net is just an alias for ...
2
votes
1answer
193 views

SPF configuration question

I understand the basics to setting up an SPF record in my zone files, on my DNS. And for the most part it seems easy enough to configure. However, I've been constantly testing my postfix server with ...
2
votes
1answer
351 views

Is a soft SPF fail bad?

Received-SPF: softfail (google.com: domain of transitioning user@domain.com does not designate XXX.XX.XXX.XXX as permitted sender) client-ip=XXX.XX.XXX.XXX; Authentication-Results: mx.google.com; ...
2
votes
2answers
724 views

Using multiple servers to send mails for single domain

I'd like to use multiple servers for sending mails like so: server A: news@domain.com server B: all other addresses for domain.com. The most important thing is the ability to send mails from server ...