Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

4
votes
4answers
3k views

Do I need SPF, and how do I set it up?

I've read that SPF is a way to ensure that spam sent in my name is evidently fake, and I'd like to use that. How do I set up SPF? Or is it already in effect? I have two domains hosted on ...
4
votes
3answers
159 views

Will mailing lists “break” if SPF is too restrictive?

I have recently configured my own mail server (Linux-based postfix + dovecot scenario). This is just for personal use - I have no bulk mail going out, no automatically generated mail outbound from the ...
4
votes
1answer
63 views

Can the dns' domain be in its own spf record?

I'm finally fixing up my dns zone files in Gandi, which has a handy feature that lets me use the same zone file for several domains. So I can keep 1 zone file for a single domain and all its tld's. ...
4
votes
1answer
1k views

Setting SPF record on Amazon Route 53 with cli53 tool

My domain is already with Amazon Route 53 and I can use the cli53 command line tool quite happily to maintain it. We are moving to use Amazon SES and I would like to add an SPF record to the domain, ...
4
votes
2answers
364 views

Blackberry & SPF

Some users on my domain use a Blackberry for email. Should Blackberry's servers be included somehow in my SPF record? Thank you much for any advice.
4
votes
2answers
2k views

SPF hardfail and DKIM failure when recipient has e-mail forwarding

I configured hardfail SPF for my domain and DKIM message signing on my SMTP server. Since this is the only SMTP server that should be used for outgoing mail from my domain, I didn't foresee any ...
4
votes
2answers
342 views

SPF Record with or without plus

Is there any difference between v=spf1 +a +mx -all and v=spf1 a mx -all I am unsure if they do the same thing or somthing different. Clarification would be great. Thank you
4
votes
2answers
156 views

Email Server Validation Website

When sending emails I want my server to have DomainKeys and SPF records setup records correctly, is there a website I can email that does validation of my DomainKeys and SPF records?
4
votes
3answers
2k views

How to reject/detect emails claiming to be from my own domain?

We have following e-mail topology: Exchange server --------- Sendmail server ---------------Internet On sendmail server there is no any user mailbox and messages with sender address ...
4
votes
3answers
169 views

TXT record for a server behind a router?

I've found this wonderful explanation of SPF on http://www.openspf.org/SPF_Record_Syntax and i had it working on my older setup. Setup has changed and i find myself in the ropes again. I have an ...
3
votes
1answer
4k views

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com ...
3
votes
7answers
8k views

all mails going to gmail SPAM (sendmail on centos) 127.0.0.1 problem?

UPDATE ON SPF CHECK http://www.openspf.org/Why: The SPF check gives me this: An SPF-enabled mail server rejected a message that claimed an envelope sender address of support@ourdomain.com. An ...
3
votes
2answers
167 views

Route 53 - Should I duplicate my SPF records as TXT records?

Amazon Route 53 supports both "SPF Records" and "TXT Records". Most documentation I read tells me to list my SPF Record as a TXT Record. I understand that the SPF Record is a newer standard. Is it ...
3
votes
1answer
533 views

How did this email bypass my SPF settings?

I received a phishing email this morning that appeared to come from one of my addresses to itself. Looking at the headers, I found something interesting. DomainKey-Status: no signature ...
3
votes
2answers
2k views

hotmail blacklist and rDNS questions

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story. After the VPS was purchased we started receiving bouncebacks with ...
3
votes
2answers
1k views

policyd-spf is rejecting mail with '?all' SPF records

One of our clients is getting mail rejected from one of his customers. The sender's SPF record is: v=spf1 +a +mx +ip4:12.34.56.78 ?all The mail is not originating from 12.34.56.78, but AFAIU the ...
3
votes
3answers
3k views

13 IP addresses, how to add them to domain SPF?

Let say I have these IP addresses on my server: 170.120.210.209 gateway 170.120.210.210 server IP 170.120.210.211 170.120.210.212 170.120.210.213 170.120.210.214 170.120.210.215 170.120.210.216 ...
3
votes
1answer
331 views

Port25.com SPF test fails, gmail SPF pass

When testing my SPF record using port25.com's nifty little tool by sending an email to check-auth@verifier.port25.com I get the following FAIL result: ...
3
votes
2answers
110 views

Will this SPF record restrict delivery of email for the original domain?

As part of the product we offer we send emails on behalf of our clients. Because the emails don't come from an IP associated with the client they are sometimes flagged as spam. We advised some of our ...
3
votes
5answers
4k views

Hotmail Sender ID always fails with “temperror” regardless of SPF

When we send mail to Hotmail servers, they do not recognize our Sender ID. In the receiving mail source, it reads Authentication-Results: hotmail.com; sender-id=temperror ... when it should say pass ...
3
votes
2answers
2k views

Gmail flagging emails as spam despite SPF being enabled and working perfectly

I have a website where people can recommend contents to their friends using their email. The issue is that emails are being flagged as spam whereas if I do the same from my development machine things ...
3
votes
2answers
1k views

SPF Setup - Sending from VPS and Google Apps

In follow up to my question here, how on earth do I setup a SPF record?!? I understand that I have to add a TXT record to my DNS entries but what to put in that TXT entry is what's confusing me... I ...
3
votes
2answers
318 views

Mixing SPF records

I have the usual Google Apps SPF record in my DNS: v=spf1 include:_spf.google.com ~all and now, since we are using ZenDesk, I should also add: v=spf1 include:support.zendesk.com ~all Should they ...
3
votes
3answers
301 views

Testing a mail server / server not making it to recipient

We have a Drupal website on a Linux server, it is using mail() to send mail through PHP. I think that would be using PHPmailer and sendmail. Domain is www.myclientdomain.com and we can receive email ...
3
votes
1answer
854 views

SPF problems with Google Apps

I currently have an SPF record with a hostname of @ that is: v=spf1 mx ip4:x.x.x.243/32 include:_spf.google.com include:amazonses.com ~all I also have another record of" spf2.0/pra mx ...
3
votes
6answers
4k views

Hotmail and Live.com rejecting all emails [duplicate]

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
3
votes
1answer
98 views

Why am I getting these emails?

Awhile ago I noticed that email messages from my domain is not immediately delivers by google, and I'm getting an smtp error message from google server. I don not remember the exact wording of that ...
3
votes
1answer
56 views

SPF record for my domain is not being detected

I have a domain (qplum.co) set up at NameCheap. I am trying to set a TXT record for setting up SPF for Mandrill but for some reason, this record is not being detected at all by any of the tools. This ...
3
votes
1answer
6k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
3
votes
3answers
7k views

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that ...
3
votes
2answers
1k views

What is the email SPF entry for sending from Yahoo!?

I have a client that is sending email from a Yahoo! Plus account as if from her own domain. Is there a way to set up the SPF record so that it covers all of Yahoo!'s outgoing servers? i.e., what do I ...
3
votes
5answers
3k views

Google Apps e-mail being rejected from some domains

I'm migrating e-mail for my domains to Google Apps' e-mail. Most everything seems to work except e-mail sent to any user at (at least) sonic.net is rejected with a message of the form (where ...
3
votes
1answer
131 views

What value does SenderID provide over SPF and DKIM?

I understand that SPF "binds" a message envelope to a set of permitted IP addresses. SenderID (with the default pra option) "binds" the message header to a set of permitted IPs in addition to the ...
3
votes
1answer
1k views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "joe@domainA.org" and the Envelope ...
3
votes
1answer
189 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
2
votes
2answers
289 views

What are SPF records and how are they related to emails?

I changed the hosting of a website and their email is hosted with another company. There is also an SPF record for that host. What is the function of that SPF record?
2
votes
3answers
3k views

How to set SPF record?

I have configured postfix to use mail.example.com I have many virtual domains, like: domain1.com domain2.com domain3.com My question is, how to set the SPF? Do I have to set SPF for each domain ...
2
votes
2answers
307 views

The +a part of SPF records

I just want to clarify the +a part of an SPF record since I have an idea how this works but I am unsure. spf record for example.com v=spf1 +a -all My current understanding is that if there is a ...
2
votes
2answers
2k views

Office365 SPF PermError: Too many DNS lookups

We are migrating from a self hosted mailing platform to Office365 for Businesses. Everything went fine, except for the SPF record. At the moment, we have v=spf1 a mx include:spf.mtasv.net -all as TXT ...
2
votes
2answers
202 views

Do I need to Set-up PTR record in SPF Setting?

I have set-up the RDNS from my hosting provider for the ip address to resolve to "maximus.example.com". After that, do I also need to add the PTR records to the SPF Text details in my DNS zone file as ...
2
votes
2answers
101 views

Sending mail from sub-domain on different server from domain getting flagged as spam

Our client owns a server with a domain: website.com We have a server that our client points videos.website.com to. Emails sent from videos.website.com are getting flagged as spam because website.com ...
2
votes
1answer
126 views

Is this SPF record valid?

I just want to confirm if my SPF record is valid : v=spf1 ip4:66.46.182.1/24 ip4:206.132.164.176/24 ip4:23.21.63.174 -all Will 2 ip ranges and a specific ip on one line valid?? Thanks in advance.
2
votes
2answers
3k views

Forward Mails to Gmail

I have a postfix mailserver running. Mails sent from users to Gmail are showing up in Gmail, so it works in general. Same for all other freemail hosts I know. The problem is that some users have no ...
2
votes
1answer
40 views

SPF records clarification of using A mechanism

What is the difference between using v=spf1 a ~all and v=spf1 ip4:IP_OF_A_RECORD ~all or v=spf1 IP_OF_A_RECORD ~all when configuring SPF records? Which way is correct and more robust and reliable?
2
votes
2answers
223 views

include:_spf.google.com not enough for hotmail

My spf is neland.dk descriptive text "v=spf1 a:mail6.paradiss.dk a:min.moar.dk a:arnold.neland.dk include:_spf.google.com -all" I get this error when sending from gmail.com as leif@neland.dk ...
2
votes
1answer
207 views

SFP Validation: Neutral - after explicitly adding servers to TXT (and SPF) record

I can't get a pass on the emails coming from my application servers :( - I have 2 I am using http://tools.bevhost.com/spf/ to validate my newly minted SPF records. It has the following to say: pass ...
2
votes
2answers
244 views

SPF record for Gmail?

I have DNS, with a SPF TXT record, configured for a domain name. The primary user of the domain name now needs to be able to send both from our SMTP servers, and also from her GMail account. I've seen ...
2
votes
2answers
2k views

Setting an SPF record for all subdomains of my domain

Is this possible? Like a wildcard TXT record of some sort?
2
votes
2answers
59 views

Order emails from online shop not delivered due to SPF errors

I have my domain served by two servers with different IP addresses: one for main website and another for online shop. When a customer places an order, among other things, an email is being sent to an ...
2
votes
1answer
97 views

Mails from relay server fails spf

An email sent by a server administered by me bounced back saying it failed the SPF check. Looking at the bounce message it had an IP different to that of the server sending the email. Then I found ...