Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

3
votes
2answers
612 views

policyd-spf is rejecting mail with '?all' SPF records

One of our clients is getting mail rejected from one of his customers. The sender's SPF record is: v=spf1 +a +mx +ip4:12.34.56.78 ?all The mail is not originating from 12.34.56.78, but AFAIU the ...
3
votes
1answer
683 views

Why is SPF being validated against my mail server's IP instead of sender's IP?

I have a mail server "example.com" which forwards all emails with recipient "me@example.com" to "me@gmail.com". My mail server runs Postfix and it uses the virtual_alias_maps mechanism to perform the ...
3
votes
3answers
2k views

13 IP addresses, how to add them to domain SPF?

Let say I have these IP addresses on my server: 170.120.210.209 gateway 170.120.210.210 server IP 170.120.210.211 170.120.210.212 170.120.210.213 170.120.210.214 170.120.210.215 170.120.210.216 ...
3
votes
2answers
91 views

Will this SPF record restrict delivery of email for the original domain?

As part of the product we offer we send emails on behalf of our clients. Because the emails don't come from an IP associated with the client they are sometimes flagged as spam. We advised some of our ...
3
votes
5answers
3k views

Hotmail Sender ID always fails with “temperror” regardless of SPF

When we send mail to Hotmail servers, they do not recognize our Sender ID. In the receiving mail source, it reads Authentication-Results: hotmail.com; sender-id=temperror ... when it should say pass ...
3
votes
2answers
2k views

Gmail flagging emails as spam despite SPF being enabled and working perfectly

I have a website where people can recommend contents to their friends using their email. The issue is that emails are being flagged as spam whereas if I do the same from my development machine things ...
3
votes
2answers
994 views

SPF Setup - Sending from VPS and Google Apps

In follow up to my question here, how on earth do I setup a SPF record?!? I understand that I have to add a TXT record to my DNS entries but what to put in that TXT entry is what's confusing me... I ...
3
votes
2answers
263 views

Mixing SPF records

I have the usual Google Apps SPF record in my DNS: v=spf1 include:_spf.google.com ~all and now, since we are using ZenDesk, I should also add: v=spf1 include:support.zendesk.com ~all Should they ...
3
votes
3answers
244 views

Testing a mail server / server not making it to recipient

We have a Drupal website on a Linux server, it is using mail() to send mail through PHP. I think that would be using PHPmailer and sendmail. Domain is www.myclientdomain.com and we can receive email ...
3
votes
1answer
776 views

SPF problems with Google Apps

I currently have an SPF record with a hostname of @ that is: v=spf1 mx ip4:x.x.x.243/32 include:_spf.google.com include:amazonses.com ~all I also have another record of" spf2.0/pra mx ...
3
votes
1answer
4k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
3
votes
3answers
6k views

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that ...
3
votes
2answers
2k views

SPF hardfail and DKIM failure when recipient has e-mail forwarding

I configured hardfail SPF for my domain and DKIM message signing on my SMTP server. Since this is the only SMTP server that should be used for outgoing mail from my domain, I didn't foresee any ...
3
votes
6answers
3k views

Hotmail and Live.com rejecting all emails

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
3
votes
2answers
344 views

Blackberry & SPF

Some users on my domain use a Blackberry for email. Should Blackberry's servers be included somehow in my SPF record? Thank you much for any advice.
3
votes
1answer
2k views

Amazon SES e-mails ending in Yahoo & Hotmail Spam folders, even though SPF and SenderID and DKIM are set correctly

This is incredibly frustrating. My Amazon SES e-mails are ending in Yahoo & Hotmail Spam folders, even though my SPF, SenderID, and DKIM are setup correctly. Since this particular site requires ...
3
votes
1answer
898 views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "joe@domainA.org" and the Envelope ...
3
votes
5answers
2k views

Google Apps e-mail being rejected from some domains

I'm migrating e-mail for my domains to Google Apps' e-mail. Most everything seems to work except e-mail sent to any user at (at least) sonic.net is rejected with a message of the form (where ...
3
votes
1answer
109 views

What value does SenderID provide over SPF and DKIM?

I understand that SPF "binds" a message envelope to a set of permitted IP addresses. SenderID (with the default pra option) "binds" the message header to a set of permitted IPs in addition to the ...
2
votes
2answers
260 views

What are SPF records and how are they related to emails?

I changed the hosting of a website and their email is hosted with another company. There is also an SPF record for that host. What is the function of that SPF record?
2
votes
3answers
2k views

How to set SPF record?

I have configured postfix to use mail.example.com I have many virtual domains, like: domain1.com domain2.com domain3.com My question is, how to set the SPF? Do I have to set SPF for each domain ...
2
votes
7answers
6k views

all mails going to gmail SPAM (sendmail on centos) 127.0.0.1 problem?

UPDATE ON SPF CHECK http://www.openspf.org/Why: The SPF check gives me this: An SPF-enabled mail server rejected a message that claimed an envelope sender address of support@ourdomain.com. An ...
2
votes
2answers
156 views

The +a part of SPF records

I just want to clarify the +a part of an SPF record since I have an idea how this works but I am unsure. spf record for example.com v=spf1 +a -all My current understanding is that if there is a ...
2
votes
2answers
877 views

Office365 SPF PermError: Too many DNS lookups

We are migrating from a self hosted mailing platform to Office365 for Businesses. Everything went fine, except for the SPF record. At the moment, we have v=spf1 a mx include:spf.mtasv.net -all as TXT ...
2
votes
2answers
2k views

hotmail blacklist and rDNS questions

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story. After the VPS was purchased we started receiving bouncebacks with ...
2
votes
1answer
112 views

Is this SPF record valid?

I just want to confirm if my SPF record is valid : v=spf1 ip4:66.46.182.1/24 ip4:206.132.164.176/24 ip4:23.21.63.174 -all Will 2 ip ranges and a specific ip on one line valid?? Thanks in advance.
2
votes
2answers
326 views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
2
votes
2answers
93 views

include:_spf.google.com not enough for hotmail

My spf is neland.dk descriptive text "v=spf1 a:mail6.paradiss.dk a:min.moar.dk a:arnold.neland.dk include:_spf.google.com -all" I get this error when sending from gmail.com as leif@neland.dk ...
2
votes
1answer
176 views

SFP Validation: Neutral - after explicitly adding servers to TXT (and SPF) record

I can't get a pass on the emails coming from my application servers :( - I have 2 I am using http://tools.bevhost.com/spf/ to validate my newly minted SPF records. It has the following to say: pass ...
2
votes
2answers
207 views

SPF record for Gmail?

I have DNS, with a SPF TXT record, configured for a domain name. The primary user of the domain name now needs to be able to send both from our SMTP servers, and also from her GMail account. I've seen ...
2
votes
2answers
2k views

Forward Mails to Gmail

I have a postfix mailserver running. Mails sent from users to Gmail are showing up in Gmail, so it works in general. Same for all other freemail hosts I know. The problem is that some users have no ...
2
votes
2answers
20 views

Sending mail from sub-domain on different server from domain getting flagged as spam

Our client owns a server with a domain: website.com We have a server that our client points videos.website.com to. Emails sent from videos.website.com are getting flagged as spam because website.com ...
2
votes
3answers
840 views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...
2
votes
3answers
726 views

CNAME domain to another domain, but keep different SPF records for the two?

SCENARIO: mydomain.com is the main website, we do send/receive mail using address@mydomain.com. mydomain.com DNS has got an SPF record "v=spf1 a mx ~all" mydomain.net is just an alias for ...
2
votes
2answers
1k views

Setting an SPF record for all subdomains of my domain

Is this possible? Like a wildcard TXT record of some sort?
2
votes
1answer
178 views

SPF configuration question

I understand the basics to setting up an SPF record in my zone files, on my DNS. And for the most part it seems easy enough to configure. However, I've been constantly testing my postfix server with ...
2
votes
1answer
349 views

Is a soft SPF fail bad?

Received-SPF: softfail (google.com: domain of transitioning user@domain.com does not designate XXX.XX.XXX.XXX as permitted sender) client-ip=XXX.XX.XXX.XXX; Authentication-Results: mx.google.com; ...
2
votes
2answers
700 views

Using multiple servers to send mails for single domain

I'd like to use multiple servers for sending mails like so: server A: news@domain.com server B: all other addresses for domain.com. The most important thing is the ability to send mails from server ...
2
votes
1answer
269 views

Using “mx ptr” parameters in DNS SPF record

I'm trying to set up my SPF record to validate properly both for emails sent through Google Apps and for those sent from MailChimp's servers. MailChimp's docs recommend this SPF record: v=spf1 mx ptr ...
2
votes
1answer
73 views

How to control the originating IPv6 of emails sent by postfix?

In a VPS with 2 IPv4 and 16 IPv6, I send emails with postfix. Each time, the email is sent from one of the IPs randomly Received: from domain.com (a random IPv6 out of my 16 IPv6) Thus, SPF fails ...
2
votes
1answer
725 views

where is this SPF problem occuring

Inbound mail to a specific user is been forwarded to his external mailbox at another domain. Add mails are routed correctly with the exception of one domain. When mail are sent to users of my domain, ...
2
votes
2answers
515 views

SPF records - what are the differences? [duplicate]

I'm trying to set up an SPF record for my domain. I've read the RFC, been to Wikipedia, openspf.org, etc. but I'm still confused. What is the difference between 'a' and 'mx'? When do I use 'mx: ...
2
votes
1answer
96 views

SPF record validation - best guess only

I administrate the domain [mydomain.com] which was until now only used for handling mail through Google Mail/Google Apps. Now I added a server which should be part of the domain without changing the ...
2
votes
1answer
66 views

Understanding the many “FROM” addresses that apply to SenderID, DKIM, and SPF

Can someone tell me when and why a client, MTA relay, Unix .Forward, anonymous relay, or listserver will create, or alter these headers: Resent-Sender: Resent-From: Sender: From: If you can please ...
2
votes
1answer
632 views

Mail classified as spam, but passes SPF and DKIM

I have configured Postfix to be responsible for subdomain.example.com (google apps is responsible for example.com so I didn't want to mix the two). As I mentioned in question title, SPF and DKIM ...
2
votes
2answers
2k views

Amazon AWS Ec2 instance, Elastic IP, Domain name from external domainseller, and Google Apps for Email

We are hosting our site on an Ec2 instance. Our Elastic IP is w.x.y.z and Public DNS is: ec2-w-x-y-z.compute-1.amazonaws.com. We've bought a domain name domainname.com from a lesser known ...
2
votes
1answer
175 views

Do I need to leave SPF TXT record for backwards compatibility?

There is a dedicated DNS SPF record which can be used for SPF record. However DNS TXT record may also be used for backwards compatibility. If i CAN define SPF record - should i just delete the ...
2
votes
1answer
81 views

How to send emails for our clients with multiple domains so that reply goes to our clients?

I am planning to do an email marketing as a service to our existing clients. We service mortgage and real estate agents and we do mailings to consumers on behalf of LO and agents. What I would like to ...
2
votes
2answers
219 views

How important is sender validation, and what matters?

When I started learning how to configure email, SPF existed but there were doubts about whether it was a good thing, and the value of offering SPF records in DNS. Now it seems that it is widely ...
2
votes
1answer
2k views

DNS zone file SPF configuration to support sending mail from multiple servers and gmail

I want to configure SPF on a domain to allow mail to be sent from: the x.com website server (x.com and www.x.com - both at same IP) its MX servers (smtp.x.com, mx.x.com, mail.x.com) another server ...