Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

0
votes
1answer
104 views

How does SPF reduce backscatter with a Google Apps account

Reading up on the SPF spec, I understand that SPF designates certain IPs as valid sender SMTP server IPs. For Google Apps, the SPF record is supposed to be v=spf1 include:_spf.google.com ~all. The ...
1
vote
1answer
1k views

Configuring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP servers

Today we realized that all of our emails being sent to email addresses of the type <username>@corporatedomain.com were getting rejected. I don't know who is hosting the email for ...
0
votes
1answer
129 views

Icinga notifications are being marked as spam when sent to my mailbox

I'm using gmail and my domain is foo.com About half the notifications from my icinga server, icinga@foo.com go to my spam folder for me@gmail.com Received-SPF: fail (google.com: domain of ...
1
vote
1answer
496 views

Failure notice with my mail server, what to do?

I've build a simple Mail server for my personal use, but Google reject my emails whatever I do. I worked hard finding the initials problems (wrong SPF entries in the DNS), but now, everything seems ...
6
votes
4answers
2k views

Why does my mail get marked as spam?

I Have the server "afspraakmanager.be". It matches everything not to be a spam server.(it isn't by the way): it has reverse dns, spf,dkim,... . But hotmail marks it as spam. I think the problem is ...
0
votes
1answer
450 views

SPF + ISP Smarthost, always untrusted?

One of the ways mail-servers protect themselves from spam is by SPF-records, a DNS look-up saying what ip-adresses are allowed to send mail from a given domain name. Another way the mail-servers use ...
2
votes
2answers
303 views

The +a part of SPF records

I just want to clarify the +a part of an SPF record since I have an idea how this works but I am unsure. spf record for example.com v=spf1 +a -all My current understanding is that if there is a ...
3
votes
1answer
188 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...
2
votes
1answer
109 views

SPF record validation - best guess only

I administrate the domain [mydomain.com] which was until now only used for handling mail through Google Mail/Google Apps. Now I added a server which should be part of the domain without changing the ...
0
votes
2answers
3k views

Yahoo flagging mail as spam when using relay server

I'm using Postfix to relay mail from my site to my mail server. Mail is received properly at my Gmail and Hotmail accounts - only Yahoo is the problem. The Yahoo mail headers state: Received-SPF: ...
0
votes
1answer
120 views

Should I put SPF checks before or after RBL checks in Postfix SMTP server?

I am setting up a Postfix SMTP server (pre v2.10) and was thinking to put the smtpd_recipient_restrictions as follows. smtpd_recipient_restrictions= permit_mynetworks, ...
2
votes
1answer
894 views

Using “mx ptr” parameters in DNS SPF record

I'm trying to set up my SPF record to validate properly both for emails sent through Google Apps and for those sent from MailChimp's servers. MailChimp's docs recommend this SPF record: v=spf1 mx ptr ...
0
votes
1answer
177 views

What will be the SPF entry in DNS?

We are using magento on our server. Magento sent transactional emails directly from our server using php mail function, along with this we are using third party webmail service. Means our mx entry ...
1
vote
1answer
2k views

Configure Sendmail to require valid SPF checks before accepting/relaying mail

We have an inbound email service that is very restrictive on who is allowed to send through our Sendmail gateways. The restrictions are generally controlled through the access file by marking ...
0
votes
2answers
3k views

Combining multiple SPF records - SenderID - kind of lost

Tried to read up on SPF record creating but I am a bit lost. I need to combine and create an SPF record because our email is not getting through. Here are the ways we send email: Daily ...
1
vote
1answer
6k views

How to define TXT SPF record with multiple senders

My setup: DNS hosted by BigCommerce which is our eCommerce and website host BigCommerce automatically created an SPF record like this: "v=spf1 +a +mx include:_spf.bigcommerce.com -all" I used a ...
5
votes
3answers
5k views

Why is my email failing Gmail's DKIM test?

I have a message that was rejected by Gmail, I don't know why. It passes SPF. We aren't using DKIM. Do I need to set up DKIM? I am in control of "example.com". Our mail server is "server.example.com" ...
17
votes
3answers
16k views

Will adding a second SPF record mess up my DNS?

Will adding a second SPF record mess up my DNS, or will it be like adding an extra nameserver? (i.e. it only helps, not hurts)
0
votes
1answer
186 views

Add multiple domain/IPs to SPF record to support google and third part senders [duplicate]

We are using Google Apps as email provider and have added following SPF record for our domain v=spf1 a mx ptr include:_spf.google.com -all We also use LivePerson as a support system and when they ...
0
votes
1answer
53 views

SPF record configuration [duplicate]

I am a bit confused about the creation of SPF records. I have my hosting domain: hosting.mydomain.com, this is the hostname of the actual server running postfix etc. I have configured my DNS like ...
0
votes
1answer
38 views

Next Step in Migrating Exchange 2003 to GMail (SPF risks when changing MX record vs disable SMTP)

Our company has been struggling to migrate Exchange to GMail for last 2 years (I will leave this for /r/talesfromtechsupport). We have two domains on two different ccTLDs, and lately Exchange is just ...
1
vote
2answers
467 views

SPF: Difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all

What is the difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all (the first one is with underline character in front of the spf, the second one without)
2
votes
1answer
98 views

How to control the originating IPv6 of emails sent by postfix?

In a VPS with 2 IPv4 and 16 IPv6, I send emails with postfix. Each time, the email is sent from one of the IPs randomly Received: from domain.com (a random IPv6 out of my 16 IPv6) Thus, SPF fails ...
1
vote
1answer
336 views

SPF: softfail (domain of transitioning email does not designate 2a01:4f8:121:2062::2 as permitted sender)

I am seeing this SPF softfail for emails sent from my server, and I notice that 2a01:4f8:121:2062::2 is an IPV6 address. When I check 2a01:4f8:121:2062::2 it is translated as 0.0.0.2 ipv4, so that ...
3
votes
1answer
6k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
0
votes
1answer
267 views

Mail marked as spam with SPF record allowing server's ipv4 but not ipv6

This question is mostly out of curiosity as I have now updated the SPF record to include the ipv6 address. I have a server and I tested its php email sending ability by sending myself an email from ...
1
vote
2answers
4k views

How to setup correct SPF record

I am trying to setup a very basic SPF record. I am hosting my website on Godaddy and using Godaddy's email servers. I am using the php mail() call (I know, I've read a ton of places to use PHP ...
5
votes
1answer
194 views

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it ...
0
votes
1answer
2k views

Multiple SPF domains in SPF DNS record. To MX or not MX?

My understanding of SPF records is that you don’t create two separate ones, but that you include multiple domains in one record with multiple include statements. My company's existing SPF record as ...
0
votes
1answer
47 views

spf records and applications sending emails [duplicate]

I have an application which is supposed to email error codes or confirmation emails to our support email. Using google apps From: Support@mydomain.com to: Support@mydomain.com This software is ...
0
votes
1answer
146 views

rDNS setup to prevent emails appearing as spam / phishing messages

We are trying to send email without the email appearing in the spam folder. The emails that we are sending is solicited bulk email. The main problem is that the emails are appearing as phishing ...
1
vote
1answer
39 views

How to set SPF TXT for this scenario?

I need to add two mailing list servers, in addition to the normal mail servers, to serve two domains. Hopefully any of the two mailing server can send email for any of the two domains. domain ...
0
votes
1answer
506 views

Email authentication without modifying DNS records

Can someone explain how Mailchimp does email authentication without user having to update SPF or DKIM records? Quote from Mailchimp: When you use MailChimp's authentication, campaigns will pass ...
0
votes
1answer
155 views

SPF records, combining suggested records

I have a domain that sends automated email using Amazon SES, regular email using Google Apps and a monthly newsletter using MailChimp. I want to combine the three suggested SPF records into one, but I ...
0
votes
1answer
87 views

SPF, Sender ID and DKIM signing - Does Sender ID need to be configured if DKIM signing in place?

While learning about SPF, Sender ID and DKIM siging, it seems that Sender ID and DKIM exist to solve similar problems. In addition, Sender ID is discussed in a fairly unflattering light on several of ...
1
vote
1answer
201 views

SPF TXT records - do I need to include sub domains for an outsourced sender SPF record

Say that I want to send mail from my own servers at example.com. As I understand it, I can specify the following SPF record and have any server addressed by an A record under example.com included by ...
0
votes
1answer
200 views

Spam sent from fake email accounts on my domain [duplicate]

One of my clients is getting thousands of "Delivery Status Notification (Failure)" emails per day and it's replied to random email accounts that don't exist on the domain. The content of the emails ...
0
votes
1answer
143 views

How is a sender verified with Gmail's 'Send Mail As' feature?

I have an email account info@example.com with mail.live.com . I also have a Gmail account. I have set up the 'Send mail as' feature in Gmail to send mail as info@example.com, and this works ...
2
votes
3answers
2k views

Should I reject email on SPF and/or DKIM failures? [duplicate]

I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for ...
3
votes
2answers
1k views

policyd-spf is rejecting mail with '?all' SPF records

One of our clients is getting mail rejected from one of his customers. The sender's SPF record is: v=spf1 +a +mx +ip4:12.34.56.78 ?all The mail is not originating from 12.34.56.78, but AFAIU the ...
1
vote
1answer
891 views

Sending email from an AWS domain via Google Apps

I have a domain managed via Amazon's Route53 service. I have a Google Apps (free) account with 10 full users. To facilitate more than 10 users (we need about 12-14), I've been using a setup whereby ...
0
votes
2answers
1k views

Outgoing mail through isp's smtp server is not getting delivered

What's the problem with the following emails? 1- Diagnostic information for administrators: Generating server: mailrelay002.isp.belgacom.be secretariat@lagereschoolbissegem.be [195.47.247.194] ...
1
vote
2answers
8k views

How to avoid messages rejection because of DMARC when sent through Gmail alias?

Many people add ' another email address as alias ' for their Gmail accounts - talking here about public Gmail not Google Apps - and they may use Gmail server not their domain servers as SMTP with the ...
0
votes
2answers
518 views

Media Temple, SPF, and Changing IP Addresses

OK...so I have a hosting account with Media Temple and recently had problems with mail servers marking my sent emails as SPAM. I looked into the issue and read it's a good idea to implement SPF which ...
0
votes
1answer
94 views

Implementing SPF for a mail server that sends email on its own, with GoDaddy

I have some troubles configuring SPF/DKIM for a VPS with a running instance of Postfix. Thanks to DMARC reports I'm finding and fixing always more issues. Today I have a problem by setting SPF ...
4
votes
2answers
364 views

Blackberry & SPF

Some users on my domain use a Blackberry for email. Should Blackberry's servers be included somehow in my SPF record? Thank you much for any advice.
0
votes
0answers
321 views

EXIM4 sent mail sometimes rejected, always put in spam. DKIM and SPF pass + reverse DNS

Recently I've been seeing some instances of Your access to this mail system has been rejected due to the sending MTA's poor reputation. in my maillog and have noticed that my emails have been getting ...
4
votes
2answers
339 views

SPF Record with or without plus

Is there any difference between v=spf1 +a +mx -all and v=spf1 a mx -all I am unsure if they do the same thing or somthing different. Clarification would be great. Thank you
0
votes
1answer
824 views

postfix mails goes to hotmail junk

I have a problem that I can't solve which is whenever I send an email from my mail server to Hotmail, it gets into the Junk folder. I'm using CentOS 6.3, SELINUX is disabled. Here are my named zone ...
13
votes
4answers
4k views

set Google Apps SPF record in Amazon AWS Route 53

I'm using the new AWS GUI for Route 53 to setup my domain records. However, the AWS console won't accept the recommended Google Apps SPF record, v=spf1 include:_spf.google.com ~all (found here). It ...