Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

7
votes
2answers
2k views

GMail suspects confirmation email in stealing personal information

When user registers on my web site, web site sends user email confirmation link. Subject: Please confirm your email address Body:Please open this link in your browser to confirm your email address: ...
3
votes
2answers
103 views

Will this SPF record restrict delivery of email for the original domain?

As part of the product we offer we send emails on behalf of our clients. Because the emails don't come from an IP associated with the client they are sometimes flagged as spam. We advised some of our ...
1
vote
2answers
513 views

What are DKIM (DomainKeys Identified Mail) and The SPF (Sender Policy Framework)?

I recently saw that cpanel has new entry for DKIM (DomainKeys Identified Mail) and The SPF (Sender Policy Framework). They seems to be talk about a mail/spam prevention, etc I would like to ...
0
votes
1answer
80 views

Rewrite header when no dkim header for specific domains

I have been receiving a lot of mails that are "From" my domain. These mails have usually a different return path (spf passes), but have for example my email in the to and the from header. ...
5
votes
3answers
3k views

PTR OK, SPF, DKIM passed but email messages are marked as Spam by Google?

# host 1.2.3.4 4.3.2.1.in-addr.arpa domain name pointer mail.domain.vn. # dig +short txt domain.vn "v=spf1 a mx ptr -all" # dig +short txt mail.domain.vn "v=spf1 a -all" Here's an email header ...
-2
votes
1answer
2k views

Is SPF record valid?

I am getting "softfail error" for the current spf record what should i do? This is the original mail i got from my domain. I added the spf record in my dns. v=spf1 mx mx:smtp.secureserver.net ...
1
vote
1answer
520 views

FROM: header is forged, SENDER: is legit , spam is delivered. how to detect?

In short: What happens: FROM: header is forged, SENDER: is legit , spam is delivered. What i need: Detect forged FROM: when possible, block delivery Explained: I have a exim server (on cpanel ...
1
vote
1answer
255 views

SPF google mail + MY IP

So this TEXT record response hardfail XX.XX.XX.XX => my mail server v=spf1 ip4:XX.XX.XX.XX include:aspmx.googlemail.com ~all Question is how to create valid SPF record for sending e-mail for my ...
1
vote
3answers
4k views

SPF record when sending mails from two different IPs

I have somedomain.com on IP 1.1.1.1 I send/receive mail using Outlook connecting to mail.somedomain.com So my DNS records for somedomain.com are the typical: www.somedomain.com >>> A ...
0
votes
4answers
446 views

Where to set up MX and SPF records on sendMail or google apps mail server

Here is my senario: I have domain say myDomain.com is using google app mail server to send and receive emails I have a sendMail server deployed on my a cloudServer that I am using to send email ...
1
vote
3answers
3k views

Why do these emails from amazon SES keep getting marked as spam?

Right now I am sending emails using the php mail() function. I am setting the From: header to an address corresponding to the hostname and also reverse-dns of the server sending the email like this: ...
1
vote
2answers
166 views

SPF Record for sending mail for a different server

I use a different server to send mail to my mailing list. I want to add an SPF record to my domain to show that the IP of the different server is authorized to send mail (as well as the default ...
0
votes
1answer
457 views

Is there any way to add SRS support to cPanel to fix forwarders and SPF records? [closed]

According to OpenSPF, SPF "breaks" email forwarding. SRS is a way to fix it. This is true on one of the cPanel/WHM servers I manage. A customer has a forwarder set up and she is complaining that ...
-1
votes
1answer
128 views

Mail server Dns zone file configuration

My server hostname is: test02.s80.in and its IP address is: 176.67.172.209 I want to configure a postfix mail server on this server. Can anyone tell me the correct DNS zone file configuration ...
2
votes
1answer
1k views

How can I change exim's DKIM and SPF for emails sent?

I've now spent 2 hours trying to figure out this issue and I am about to give up and go to bed. I've been having issues with Gmail rejecting emails from my VPS server because of false spam alerts ...
6
votes
1answer
364 views

Should SPF records provided by ISPs contain “all” at the end?

This seems obvious or something I just don't understand. I want to build SPF records for my clients. Most of the email providers provide an SPF record that I can "include" in mine, but they all ...
0
votes
1answer
36 views

I have a mail server that hosts several client emails but 1 in particular is being blocked because of its SBRS score

If I was hosting emails for 3 clients and my reverse DNS is mail.allclients.com and I am hosting for client2.com, client3.com etc. What would be the rDNS for client3.com? Would it reflect the rDNS of ...
13
votes
2answers
3k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
3
votes
1answer
1k views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "joe@domainA.org" and the Envelope ...
0
votes
3answers
2k views

Hotmail wants me to modify my SPF record

This is my current SPF record. It works well with gmail and yahoo but hotmail was ignoring. So i used their submit system and now they replied me with the text below. This is my current spf v=spf1 a ...
10
votes
3answers
4k views

Gmail rejects emails. Openspf.net fails the tests

I've got a problem with Gmail. It started after one of our trojan infected PCs sent spam for one day from our IP address. We've fixed the problem, but we got into 3 black lists. We've fixed that, ...
-2
votes
1answer
219 views

In which DNS zone files i have to put spf record entry to get “spf=pass”?

"Authentication-Results: mx.google.com; spf=neutral (google.com: 46.23.76.174 is neither permitted nor denied by best guess record for domain of vns6.wtech.in) smtp.mail=a@vns6.wtech.in". This ...
-1
votes
1answer
155 views

spf record entry

I have two DNS zone files can anyone please tell me in which one I have to add an SPF record? Zone (localhost.zone): $TTL 86400 @ IN SOA @ root ( ...
0
votes
1answer
109 views

How to do spf record entry in dns?

I have a postfix configured cent0s 5.5 mail server in 64 bit configuration. I want to know, how to record sender policy framework(SPF) entry in my domain name server zone files.
1
vote
1answer
505 views

Does an SMTP server have to have a public IP?

We have an SMTP server setup on an internal IP (10.x.x.x) that will send email to our customers. Since the server is inaccessible to DNS lookups from the outside, will this cause issues for sending ...
7
votes
2answers
11k views

How to specify multiple included domains in SPF record?

Our business email is hosted on Google apps. In addition, our web server may also send email. Currently our SPF record in DNS looks like this: domain.com. IN TXT "v=spf1 a ...
-1
votes
1answer
742 views

mxttolbox SPF check - showing - all fail & Rest ptr a mx are Passed . What is the reason

Newly created spf record for one of our domain . texxxxx.com goes like this teXXXXXX.com v=spf1 a mx ptr ip4:189.123.111.000 mx:teXXXXX.com -all ( not real values) and mxtool spf check ...
10
votes
1answer
116 views

What takes precedence: an SPF record with “-all” in the primary TXT record, or one in the “include” section?

Suppose I have a domain (company.com) with an SPF that looks like this: v=spf1 ip4:70.70.70.70 include:host.marketing.com -all and "host.marketing.com" looks like this v=spf1 ip4:8.8.8.8 ~all ...
3
votes
2answers
299 views

Mixing SPF records

I have the usual Google Apps SPF record in my DNS: v=spf1 include:_spf.google.com ~all and now, since we are using ZenDesk, I should also add: v=spf1 include:support.zendesk.com ~all Should they ...
10
votes
1answer
2k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
0
votes
2answers
441 views

Media Temple, SPF, and Changing IP Addresses

OK...so I have a hosting account with Media Temple and recently had problems with mail servers marking my sent emails as SPAM. I looked into the issue and read it's a good idea to implement SPF which ...
0
votes
2answers
690 views

SPF record for media temple domain and google together

Hello I'm trying to add an SPF record for our MT dv server as per this tutorial: http://kb.mediatemple.net/questions/658/How+can+I+create+an+SPF+record+for+my+domain%3F#gs Which instructs me to add ...
1
vote
1answer
1k views

Configure Sendmail to require valid SPF checks before accepting/relaying mail

We have an inbound email service that is very restrictive on who is allowed to send through our Sendmail gateways. The restrictions are generally controlled through the access file by marking ...
3
votes
2answers
2k views

hotmail blacklist and rDNS questions

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story. After the VPS was purchased we started receiving bouncebacks with ...
1
vote
1answer
5k views

How to define TXT SPF record with multiple senders

My setup: DNS hosted by BigCommerce which is our eCommerce and website host BigCommerce automatically created an SPF record like this: "v=spf1 +a +mx include:_spf.bigcommerce.com -all" I used a ...
-1
votes
1answer
3k views

How to add an SPF record in Webmin?

I'm using VPS server with ubuntu 11.04 and webmin. And in one of my domain I'd like to use google apps, but neither in webmin panel nor in conf file I see a place to add this google spf record: ...
2
votes
2answers
1k views

Setting an SPF record for all subdomains of my domain

Is this possible? Like a wildcard TXT record of some sort?
3
votes
3answers
281 views

Testing a mail server / server not making it to recipient

We have a Drupal website on a Linux server, it is using mail() to send mail through PHP. I think that would be using PHPmailer and sendmail. Domain is www.myclientdomain.com and we can receive email ...
0
votes
1answer
119 views

Spf dkim edit dns zone mailing issue

I am running an hosting company and i was previously affliate of hostgator. when i sent mails from my domain to my customers it would come as info@example.com via hostgator.com and mailed by ...
11
votes
4answers
3k views

set Google Apps SPF record in Amazon AWS Route 53

I'm using the new AWS GUI for Route 53 to setup my domain records. However, the AWS console won't accept the recommended Google Apps SPF record, v=spf1 include:_spf.google.com ~all (found here). It ...
1
vote
1answer
28 views

Emailing as different domain from our IIS server

We have an enterprisey web application which uses .NET to send out email from our domain (oursite.com). This domain exists and has a valid SPF record and we've very rarely had spam issues with our ...
1
vote
2answers
912 views

What should be the spf record for my domain?

I have my own registered domain. I have a dedicated IP for my domain. I use a shared hosting service for my website. I want to send mail with php's function mail();. I have created one email ...
4
votes
3answers
403 views

With valid SPF my mail header becomes huge -> high spamassasin score

I have a dedicated server with a survey system running on a subdomain. The parent domain is hosted on another server. I send email via google apps. Reverse DNS is correct. Without SPF og DKIM, the ...
4
votes
1answer
1k views

Setting SPF record on Amazon Route 53 with cli53 tool

My domain is already with Amazon Route 53 and I can use the cli53 command line tool quite happily to maintain it. We are moving to use Amazon SES and I would like to add an SPF record to the domain, ...
1
vote
3answers
2k views

What's wrong with my SPF record?

This is my SPF record: v=spf1 a ip4:111.222.333.444 include:_spf.google.com ~all I sent a test email to my Gmail address and below are the headers. I replaced real IP address with 111.222.333.444 ...
3
votes
5answers
4k views

Hotmail Sender ID always fails with “temperror” regardless of SPF

When we send mail to Hotmail servers, they do not recognize our Sender ID. In the receiving mail source, it reads Authentication-Results: hotmail.com; sender-id=temperror ... when it should say pass ...
0
votes
1answer
173 views

Correct SPF for using google-apps with additional outbound mailserver

[Asked this on stackoverflow and was referred here] We are developing a custom web app for a client. This app is on a separate server, server.com, than the client's web site, www.client.com. Each ...
12
votes
5answers
9k views

Do SPF Records For Primary Domain apply to subdomains?

I have a quick question regarding SPF records: Do they need to be present for all subdomains? Lets say that I have a TXT record with SPF info for domain.com Let's also say that I have a seperate ...
1
vote
2answers
422 views

Correct DNS settings for my server setup

I am struggling to understand the correct DNS settings for my server setup. I have a web server with a single IP and 6 domains hosted on it. I got IIS6's SMTP virtual server working yesterday and ...
-4
votes
2answers
291 views

SPF and DKIM configuration with postfix [closed]

I am using Centos-5 and have configured postfix mail server. How to i configure SPF and DKIM in Postfix.