Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

3
votes
1answer
418 views

How did this email bypass my SPF settings?

I received a phishing email this morning that appeared to come from one of my addresses to itself. Looking at the headers, I found something interesting. DomainKey-Status: no signature ...
3
votes
5answers
714 views

SAN typical MTBF

We're using a SAN on a project at work, and there's a bit of debate around the fact that's technically it's a Single Point of Failure. No one seems to have any hard data. The SAN in question is a ...
3
votes
2answers
777 views

policyd-spf is rejecting mail with '?all' SPF records

One of our clients is getting mail rejected from one of his customers. The sender's SPF record is: v=spf1 +a +mx +ip4:12.34.56.78 ?all The mail is not originating from 12.34.56.78, but AFAIU the ...
3
votes
3answers
3k views

13 IP addresses, how to add them to domain SPF?

Let say I have these IP addresses on my server: 170.120.210.209 gateway 170.120.210.210 server IP 170.120.210.211 170.120.210.212 170.120.210.213 170.120.210.214 170.120.210.215 170.120.210.216 ...
3
votes
1answer
102 views

Port25.com SPF test fails, gmail SPF pass

When testing my SPF record using port25.com's nifty little tool by sending an email to check-auth@verifier.port25.com I get the following FAIL result: ...
3
votes
2answers
94 views

Will this SPF record restrict delivery of email for the original domain?

As part of the product we offer we send emails on behalf of our clients. Because the emails don't come from an IP associated with the client they are sometimes flagged as spam. We advised some of our ...
3
votes
5answers
3k views

Hotmail Sender ID always fails with “temperror” regardless of SPF

When we send mail to Hotmail servers, they do not recognize our Sender ID. In the receiving mail source, it reads Authentication-Results: hotmail.com; sender-id=temperror ... when it should say pass ...
3
votes
2answers
2k views

Gmail flagging emails as spam despite SPF being enabled and working perfectly

I have a website where people can recommend contents to their friends using their email. The issue is that emails are being flagged as spam whereas if I do the same from my development machine things ...
3
votes
2answers
1k views

SPF Setup - Sending from VPS and Google Apps

In follow up to my question here, how on earth do I setup a SPF record?!? I understand that I have to add a TXT record to my DNS entries but what to put in that TXT entry is what's confusing me... I ...
3
votes
2answers
276 views

Mixing SPF records

I have the usual Google Apps SPF record in my DNS: v=spf1 include:_spf.google.com ~all and now, since we are using ZenDesk, I should also add: v=spf1 include:support.zendesk.com ~all Should they ...
3
votes
3answers
265 views

Testing a mail server / server not making it to recipient

We have a Drupal website on a Linux server, it is using mail() to send mail through PHP. I think that would be using PHPmailer and sendmail. Domain is www.myclientdomain.com and we can receive email ...
3
votes
1answer
790 views

SPF problems with Google Apps

I currently have an SPF record with a hostname of @ that is: v=spf1 mx ip4:x.x.x.243/32 include:_spf.google.com include:amazonses.com ~all I also have another record of" spf2.0/pra mx ...
3
votes
1answer
5k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
3
votes
3answers
6k views

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that ...
3
votes
2answers
2k views

SPF hardfail and DKIM failure when recipient has e-mail forwarding

I configured hardfail SPF for my domain and DKIM message signing on my SMTP server. Since this is the only SMTP server that should be used for outgoing mail from my domain, I didn't foresee any ...
3
votes
6answers
3k views

Hotmail and Live.com rejecting all emails

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
3
votes
2answers
346 views

Blackberry & SPF

Some users on my domain use a Blackberry for email. Should Blackberry's servers be included somehow in my SPF record? Thank you much for any advice.
3
votes
1answer
983 views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "joe@domainA.org" and the Envelope ...
3
votes
5answers
3k views

Google Apps e-mail being rejected from some domains

I'm migrating e-mail for my domains to Google Apps' e-mail. Most everything seems to work except e-mail sent to any user at (at least) sonic.net is rejected with a message of the form (where ...
3
votes
1answer
115 views

What value does SenderID provide over SPF and DKIM?

I understand that SPF "binds" a message envelope to a set of permitted IP addresses. SenderID (with the default pra option) "binds" the message header to a set of permitted IPs in addition to the ...
2
votes
2answers
267 views

What are SPF records and how are they related to emails?

I changed the hosting of a website and their email is hosted with another company. There is also an SPF record for that host. What is the function of that SPF record?
2
votes
3answers
3k views

How to set SPF record?

I have configured postfix to use mail.example.com I have many virtual domains, like: domain1.com domain2.com domain3.com My question is, how to set the SPF? Do I have to set SPF for each domain ...
2
votes
1answer
3k views

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com ...
2
votes
7answers
6k views

all mails going to gmail SPAM (sendmail on centos) 127.0.0.1 problem?

UPDATE ON SPF CHECK http://www.openspf.org/Why: The SPF check gives me this: An SPF-enabled mail server rejected a message that claimed an envelope sender address of support@ourdomain.com. An ...
2
votes
2answers
176 views

The +a part of SPF records

I just want to clarify the +a part of an SPF record since I have an idea how this works but I am unsure. spf record for example.com v=spf1 +a -all My current understanding is that if there is a ...
2
votes
2answers
1k views

Office365 SPF PermError: Too many DNS lookups

We are migrating from a self hosted mailing platform to Office365 for Businesses. Everything went fine, except for the SPF record. At the moment, we have v=spf1 a mx include:spf.mtasv.net -all as TXT ...
2
votes
2answers
2k views

hotmail blacklist and rDNS questions

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story. After the VPS was purchased we started receiving bouncebacks with ...
2
votes
2answers
534 views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
2
votes
1answer
117 views

Is this SPF record valid?

I just want to confirm if my SPF record is valid : v=spf1 ip4:66.46.182.1/24 ip4:206.132.164.176/24 ip4:23.21.63.174 -all Will 2 ip ranges and a specific ip on one line valid?? Thanks in advance.
2
votes
2answers
112 views

include:_spf.google.com not enough for hotmail

My spf is neland.dk descriptive text "v=spf1 a:mail6.paradiss.dk a:min.moar.dk a:arnold.neland.dk include:_spf.google.com -all" I get this error when sending from gmail.com as leif@neland.dk ...
2
votes
1answer
190 views

SFP Validation: Neutral - after explicitly adding servers to TXT (and SPF) record

I can't get a pass on the emails coming from my application servers :( - I have 2 I am using http://tools.bevhost.com/spf/ to validate my newly minted SPF records. It has the following to say: pass ...
2
votes
2answers
215 views

SPF record for Gmail?

I have DNS, with a SPF TXT record, configured for a domain name. The primary user of the domain name now needs to be able to send both from our SMTP servers, and also from her GMail account. I've seen ...
2
votes
2answers
2k views

Forward Mails to Gmail

I have a postfix mailserver running. Mails sent from users to Gmail are showing up in Gmail, so it works in general. Same for all other freemail hosts I know. The problem is that some users have no ...
2
votes
2answers
28 views

Sending mail from sub-domain on different server from domain getting flagged as spam

Our client owns a server with a domain: website.com We have a server that our client points videos.website.com to. Emails sent from videos.website.com are getting flagged as spam because website.com ...
2
votes
3answers
1k views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...
2
votes
3answers
854 views

CNAME domain to another domain, but keep different SPF records for the two?

SCENARIO: mydomain.com is the main website, we do send/receive mail using address@mydomain.com. mydomain.com DNS has got an SPF record "v=spf1 a mx ~all" mydomain.net is just an alias for ...
2
votes
2answers
1k views

Setting an SPF record for all subdomains of my domain

Is this possible? Like a wildcard TXT record of some sort?
2
votes
1answer
180 views

SPF configuration question

I understand the basics to setting up an SPF record in my zone files, on my DNS. And for the most part it seems easy enough to configure. However, I've been constantly testing my postfix server with ...
2
votes
1answer
349 views

Is a soft SPF fail bad?

Received-SPF: softfail (google.com: domain of transitioning user@domain.com does not designate XXX.XX.XXX.XXX as permitted sender) client-ip=XXX.XX.XXX.XXX; Authentication-Results: mx.google.com; ...
2
votes
2answers
709 views

Using multiple servers to send mails for single domain

I'd like to use multiple servers for sending mails like so: server A: news@domain.com server B: all other addresses for domain.com. The most important thing is the ability to send mails from server ...
2
votes
1answer
438 views

Using “mx ptr” parameters in DNS SPF record

I'm trying to set up my SPF record to validate properly both for emails sent through Google Apps and for those sent from MailChimp's servers. MailChimp's docs recommend this SPF record: v=spf1 mx ptr ...
2
votes
1answer
78 views

How to control the originating IPv6 of emails sent by postfix?

In a VPS with 2 IPv4 and 16 IPv6, I send emails with postfix. Each time, the email is sent from one of the IPs randomly Received: from domain.com (a random IPv6 out of my 16 IPv6) Thus, SPF fails ...
2
votes
1answer
213 views

Is my SPF record not valid?

I have a problem with one of the email services. It rejects emails from my server. I contacted them and they answered that they check SPF records and I am sending emails from not authorised server. ...
2
votes
1answer
770 views

where is this SPF problem occuring

Inbound mail to a specific user is been forwarded to his external mailbox at another domain. Add mails are routed correctly with the exception of one domain. When mail are sent to users of my domain, ...
2
votes
2answers
537 views

SPF records - what are the differences? [duplicate]

I'm trying to set up an SPF record for my domain. I've read the RFC, been to Wikipedia, openspf.org, etc. but I'm still confused. What is the difference between 'a' and 'mx'? When do I use 'mx: ...
2
votes
1answer
29 views

PTR Webserver and Appserver

I'm a little confused about the setup of a PTR record for reverse dns lookup. We are hosted at Rackspace and we have a front end webserver and behind that an appserver. Users don't access the ...
2
votes
1answer
101 views

SPF record validation - best guess only

I administrate the domain [mydomain.com] which was until now only used for handling mail through Google Mail/Google Apps. Now I added a server which should be part of the domain without changing the ...
2
votes
1answer
71 views

Understanding the many “FROM” addresses that apply to SenderID, DKIM, and SPF

Can someone tell me when and why a client, MTA relay, Unix .Forward, anonymous relay, or listserver will create, or alter these headers: Resent-Sender: Resent-From: Sender: From: If you can please ...
2
votes
1answer
645 views

Mail classified as spam, but passes SPF and DKIM

I have configured Postfix to be responsible for subdomain.example.com (google apps is responsible for example.com so I didn't want to mix the two). As I mentioned in question title, SPF and DKIM ...
2
votes
2answers
2k views

Amazon AWS Ec2 instance, Elastic IP, Domain name from external domainseller, and Google Apps for Email

We are hosting our site on an Ec2 instance. Our Elastic IP is w.x.y.z and Public DNS is: ec2-w-x-y-z.compute-1.amazonaws.com. We've bought a domain name domainname.com from a lesser known ...