Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

6
votes
1answer
3k views

Amazon SES e-mails ending in Yahoo & Hotmail Spam folders, even though SPF and SenderID and DKIM are set correctly

This is incredibly frustrating. My Amazon SES e-mails are ending in Yahoo & Hotmail Spam folders, even though my SPF, SenderID, and DKIM are setup correctly. Since this particular site requires ...
6
votes
2answers
4k views

Google Apps, SPF, softfail problem (validates with validation tools, but still softfails otherwise)

I guess this is probably a commonly asked and boring question but I'm really at a loss and I don't know what else to do. This might be a duplicate of other questions, but none of the solutions worked ...
5
votes
3answers
3k views

PTR OK, SPF, DKIM passed but email messages are marked as Spam by Google?

# host 1.2.3.4 4.3.2.1.in-addr.arpa domain name pointer mail.domain.vn. # dig +short txt domain.vn "v=spf1 a mx ptr -all" # dig +short txt mail.domain.vn "v=spf1 a -all" Here's an email header ...
5
votes
1answer
1k views

Setting SPF record on Amazon Route 53 with cli53 tool

My domain is already with Amazon Route 53 and I can use the cli53 command line tool quite happily to maintain it. We are moving to use Amazon SES and I would like to add an SPF record to the domain, ...
5
votes
6answers
9k views

Emails going to Junk for Hotmail recipients [duplicate]

We send daily mass emails to our customers (~30,000+ emails per day). We have problems with Hotmail users receiving our emails. Sometimes the email goes to the Junk folder, but often it will got to ...
5
votes
4answers
9k views

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that ...
5
votes
2answers
3k views

SPF hardfail and DKIM failure when recipient has e-mail forwarding

I configured hardfail SPF for my domain and DKIM message signing on my SMTP server. Since this is the only SMTP server that should be used for outgoing mail from my domain, I didn't foresee any ...
5
votes
5answers
976 views

SMTP server, SPF records, domainkeys

Recently we have setup a new SMTP server to send newsletters and promotional mails to our registered users. There are 5000 users who will receive newsletters on weekly basis. We are getting bounced ...
5
votes
3answers
3k views

How to reject/detect emails claiming to be from my own domain?

We have following e-mail topology: Exchange server --------- Sendmail server ---------------Internet On sendmail server there is no any user mailbox and messages with sender address ...
5
votes
3answers
9k views

How to format and where to put the SPF TXT record?

EDIT I think I more or less understand the syntax and, anyway, Google is giving, in the link below, the syntax needed. My question is really where to put that stuff. Should I quote every field? The ...
4
votes
6answers
2k views

Are SPF needed for domains that do not send mails and do not have MX record?

I have some domains registered that do not send mails. I have totally removed MX record for these domains on my DNS. Is it still useful to set an SPF record in order to avoid spammer to send mails ...
4
votes
1answer
7k views

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com ...
4
votes
1answer
465 views

What does MX in SPF mean? [duplicate]

I'm setting up an email server, and I'm a bit confused by SPF. Following some examples, I set my SPF record as follows... v=spf1 mx ip4:1.2.3.4 mx:mail.mydomain.com ptr:1.2.3.4 -all I follow what ...
4
votes
1answer
186 views

SPF records issue

I have an SPF record set up for my domain eg: v=spf1 a mx include:mydomain.co.uk ?all However, I now have to add an SPF record for a web based invoicing system which wants me to add the following ...
4
votes
3answers
471 views

With valid SPF my mail header becomes huge -> high spamassasin score

I have a dedicated server with a survey system running on a subdomain. The parent domain is hosted on another server. I send email via google apps. Reverse DNS is correct. Without SPF og DKIM, the ...
4
votes
3answers
473 views

Will mailing lists “break” if SPF is too restrictive?

I have recently configured my own mail server (Linux-based postfix + dovecot scenario). This is just for personal use - I have no bulk mail going out, no automatically generated mail outbound from the ...
4
votes
1answer
64 views

Can the dns' domain be in its own spf record?

I'm finally fixing up my dns zone files in Gandi, which has a handy feature that lets me use the same zone file for several domains. So I can keep 1 zone file for a single domain and all its tld's. ...
4
votes
2answers
399 views

Blackberry & SPF

Some users on my domain use a Blackberry for email. Should Blackberry's servers be included somehow in my SPF record? Thank you much for any advice.
4
votes
2answers
952 views

SPF Record with or without plus

Is there any difference between v=spf1 +a +mx -all and v=spf1 a mx -all I am unsure if they do the same thing or somthing different. Clarification would be great. Thank you
4
votes
2answers
158 views

Email Server Validation Website

When sending emails I want my server to have DomainKeys and SPF records setup records correctly, is there a website I can email that does validation of my DomainKeys and SPF records?
4
votes
3answers
193 views

TXT record for a server behind a router?

I've found this wonderful explanation of SPF on http://www.openspf.org/SPF_Record_Syntax and i had it working on my older setup. Setup has changed and i find myself in the ropes again. I have an ...
3
votes
7answers
10k views

all mails going to gmail SPAM (sendmail on centos) 127.0.0.1 problem?

UPDATE ON SPF CHECK http://www.openspf.org/Why: The SPF check gives me this: An SPF-enabled mail server rejected a message that claimed an envelope sender address of support@ourdomain.com. An ...
3
votes
3answers
3k views

Office365 SPF PermError: Too many DNS lookups

We are migrating from a self hosted mailing platform to Office365 for Businesses. Everything went fine, except for the SPF record. At the moment, we have v=spf1 a mx include:spf.mtasv.net -all as TXT ...
3
votes
1answer
870 views

How did this email bypass my SPF settings?

I received a phishing email this morning that appeared to come from one of my addresses to itself. Looking at the headers, I found something interesting. DomainKey-Status: no signature ...
3
votes
1answer
5k views

IP address is not allowed to send mail from DOMAIN

Today I heard that a customer can't send email to us. He received the following error: < #5.5.0 smtp;550 [ipaddress] is not allowed to send mail from [domain name]. Please see ...
3
votes
2answers
2k views

policyd-spf is rejecting mail with '?all' SPF records

One of our clients is getting mail rejected from one of his customers. The sender's SPF record is: v=spf1 +a +mx +ip4:12.34.56.78 ?all The mail is not originating from 12.34.56.78, but AFAIU the ...
3
votes
2answers
3k views

hotmail blacklist and rDNS questions

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story. After the VPS was purchased we started receiving bouncebacks with ...
3
votes
3answers
3k views

CNAME domain to another domain, but keep different SPF records for the two?

SCENARIO: mydomain.com is the main website, we do send/receive mail using address@mydomain.com. mydomain.com DNS has got an SPF record "v=spf1 a mx ~all" mydomain.net is just an alias for ...
3
votes
3answers
3k views

13 IP addresses, how to add them to domain SPF?

Let say I have these IP addresses on my server: 170.120.210.209 gateway 170.120.210.210 server IP 170.120.210.211 170.120.210.212 170.120.210.213 170.120.210.214 170.120.210.215 170.120.210.216 ...
3
votes
1answer
2k views

PermError SPF Permanent Error: Void lookup limit of 2 exceeded

I am trying to setup SPF on a server - mail works fine and validates according to mxtoolbox and other online checks but when I check it using http://www.kitterman.com/spf/validate.html I get an error: ...
3
votes
1answer
530 views

Port25.com SPF test fails, gmail SPF pass

When testing my SPF record using port25.com's nifty little tool by sending an email to check-auth@verifier.port25.com I get the following FAIL result: ...
3
votes
2answers
134 views

Will this SPF record restrict delivery of email for the original domain?

As part of the product we offer we send emails on behalf of our clients. Because the emails don't come from an IP associated with the client they are sometimes flagged as spam. We advised some of our ...
3
votes
2answers
2k views

Gmail flagging emails as spam despite SPF being enabled and working perfectly

I have a website where people can recommend contents to their friends using their email. The issue is that emails are being flagged as spam whereas if I do the same from my development machine things ...
3
votes
2answers
1k views

SPF Setup - Sending from VPS and Google Apps

In follow up to my question here, how on earth do I setup a SPF record?!? I understand that I have to add a TXT record to my DNS entries but what to put in that TXT entry is what's confusing me... I ...
3
votes
2answers
370 views

Mixing SPF records

I have the usual Google Apps SPF record in my DNS: v=spf1 include:_spf.google.com ~all and now, since we are using ZenDesk, I should also add: v=spf1 include:support.zendesk.com ~all Should they ...
3
votes
3answers
370 views

Testing a mail server / server not making it to recipient

We have a Drupal website on a Linux server, it is using mail() to send mail through PHP. I think that would be using PHPmailer and sendmail. Domain is www.myclientdomain.com and we can receive email ...
3
votes
1answer
961 views

SPF problems with Google Apps

I currently have an SPF record with a hostname of @ that is: v=spf1 mx ip4:x.x.x.243/32 include:_spf.google.com include:amazonses.com ~all I also have another record of" spf2.0/pra mx ...
3
votes
6answers
7k views

Hotmail and Live.com rejecting all emails [duplicate]

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
3
votes
3answers
2k views

What is the email SPF entry for sending from Yahoo!?

I have a client that is sending email from a Yahoo! Plus account as if from her own domain. Is there a way to set up the SPF record so that it covers all of Yahoo!'s outgoing servers? i.e., what do I ...
3
votes
2answers
211 views

Migrating Email Providers; Are Multiple DKIM Records Viable During Transition?

I am currently gathering requirements for a small (hopefully) project of migrating from SendGrid to Mandrill as a transactional email service provider. We have been using SendGrid for close to 3-4 ...
3
votes
1answer
386 views

Why am I getting these emails?

Awhile ago I noticed that email messages from my domain is not immediately delivers by google, and I'm getting an smtp error message from google server. I don not remember the exact wording of that ...
3
votes
1answer
231 views

SPF record for my domain is not being detected

I have a domain (qplum.co) set up at NameCheap. I am trying to set a TXT record for setting up SPF for Mandrill but for some reason, this record is not being detected at all by any of the tools. This ...
3
votes
1answer
89 views

Delivery Status Notification (Failure) => 550 SPF: x.x.x.x (IP address) is not allowed to send mail from <our-domain.com>

Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the server for the recipient domain <repipients-domain.com> by <repipients-domain.com>. ...
3
votes
1answer
119 views

Exchange not checking SPF record for own domain

I have an interesting issue with Exchange where it appears to check and stamp spoofed messages from external domains but not ones it has setup to send from. For example I can spoof a message from ...
3
votes
1answer
149 views

What value does SenderID provide over SPF and DKIM?

I understand that SPF "binds" a message envelope to a set of permitted IP addresses. SenderID (with the default pra option) "binds" the message header to a set of permitted IPs in addition to the ...
3
votes
1answer
2k views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "joe@domainA.org" and the Envelope ...
3
votes
5answers
4k views

Google Apps e-mail being rejected from some domains

I'm migrating e-mail for my domains to Google Apps' e-mail. Most everything seems to work except e-mail sent to any user at (at least) sonic.net is rejected with a message of the form (where ...
3
votes
1answer
116 views

exim4 configuration with SRS daemon

I'm struggeling setting up exim 4 with an external SRS daemon (Debian package srs). The srsd is running and converting addresses back and forward just fine. I can't use exim's built-in srs code, since ...
3
votes
0answers
155 views

SPF check based on client IP instead of MTA IP?

Setup On a client computer with IP address a.a.a.a, there is a mail client that uses SMTP to send emails via company email server example.com with IP address b.b.b.b. The company email server ...
3
votes
2answers
318 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...