Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

0
votes
3answers
26 views

mails fom my mailserver go to spam folder of hotmail.com

I set up a mail server with dovecot/postfix on a debian server. I don't send commercial mail or newsletters. We are only 4 users and nobody send SPAM. We only send classical mails (no large pictures ...
8
votes
3answers
2k views

Do changes in SPF records take time to propagate?

I'm setting up SPF records for my domain, and am not getting the results that I expect. It's quite possible I'm making some sort of mistake, but first I'd like to ask: does it take time for the ...
0
votes
2answers
29 views

Spf A record for a second domain

I need to use this spf record on example.com domain: example.com. IN TXT "v=spf1 a mx a:smtp.second.net -all" I'd like to know if a client sending an email from bob@example.com domain will pass ...
0
votes
1answer
20 views

Change the domain in the 'via' that Gmail shows as the result of a wrong SPF record

So I have a small Linux webserver, it is running the Direct Admin control panel and everything is working fine. For each domain, SPF and DKIM records are present in the DNS and mail is (as far as I ...
1
vote
2answers
46 views

Merging SPF records

I have one SPF record: v=spf1 a mx ip4:111.111.111.111 -all and I need to add one more: v=spf1 ip4:222.222.222.222 include:_spf.example.net ~all How to merge them correctly? Is v=spf1 ip4:222....
1
vote
2answers
36 views

Allowing a partially trusted server to send mail for one given address via SPF / DKIM

I run a web service that should be able to send out e-mails using a company address, e.g. foo@company.com. I do not, however, want to give this service access to the mail server of company.com (for ...
5
votes
1answer
7k views

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com (mail-yx0-f172.google....
-3
votes
1answer
27 views

SPF Error with redirection

so I have this crazy SPF-Policy problem which looks like that: I have a private domain like 'my-private-domain.com'. This one I'm hosting myself on a vServer and I activated SPF and added the SPF ...
0
votes
1answer
55 views

Cant sent mail from own server to google

I'm running a mail server and I'm having problem with sending mails to google. Mails to other providers work fine. I guess its maybe related to my DNS settings, as I've read that google is quite ...
1
vote
2answers
25 views

sending emails from different Smtps in different IPs

I sent mails with different Smtps for example Smtp1 on IP 1.1.1.1 and Smtp2 on IP 2.2.2.2 . which my spf record for the From (info@myDoamin.com) part in emails is : spf1 include:mail.mydomain....
-1
votes
0answers
20 views

Emails going to spam [duplicate]

For some reason my emails are going to SPAM/Junk on Gmail, Yahoo, Hotmail etc. I have checked and setup the SPF, MX records and even checked many validation tools online - everything appears to check ...
0
votes
1answer
27 views

slow e-mail delivery, soft spf notification

we have a server that saves and forwards e-mails to my own google mail (=peter@nowhow.be). These mails are delayed, and when looking at the mail source, I noticed this spf softfail: (google.com: ...
0
votes
1answer
39 views

Can I retrieve email marked as rejected in the SMTP log?

I am using a Sophos UTM 9 SG210 firewall and noticed in the SMTP log that a formerly trusted sender has had 50 legitimate emails rejected. I've since added them to an exemption list, but was ...
0
votes
1answer
54 views

Why don't my domain's messages to a google group get their headers rewritten so DMARC can pass?

Whenever my domain sends a message to a google group on another domain the DMARC alignment fails. This is true for all my approved senders, even using Gmail in my domain. It seems to be because the ...
16
votes
4answers
7k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
2
votes
2answers
345 views

Only enable SRS when forwarding to enable DMARC

I am setting up a mail server on my VPS and in order to prevent spam and being marked as spam I have enabled SPF, DKIM and DMARC. However, I do not want to host my own mailbox, so I forward the ...
6
votes
2answers
2k views

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it ...
1
vote
3answers
143 views

SPF Record bypassed

I just received an email from feedback@ranelaghhouse.com to feedback@ranelaghhouse.com which was caught by my catch-all and emailed to me. Below are the headers for the email which show that it was ...
-1
votes
0answers
17 views

Mandrill domain verification email not being sent

We've got a Mandrill/Mailchimp account set up to send emails from a client's domain. We have valid DKIM and SPF records and Mandrill is happy with them, the only thing remaining is sending the ...
0
votes
2answers
274 views

How to setup postfix to check SPF record only for domains that i want to check

I have working postfix server. It configured with amavis and uses pretty good SMTP headers control. But sometimes my users receive spam from spammers with well known mail service providers addresses. ...
1
vote
1answer
25 views

SPF redirect modifier

The SPF record for domain replace the current record. The macro-expanded domain is also substituted for the current-domain in those look-ups. Examples: In the following example, the ...
33
votes
5answers
580 views

Is it becoming impossible to be a small mail provider?

I operate a small mail server for my private emails, some friends who have websites and two NGOs. In total my server sends between 60 and 400 messages a day. Now a lot of these emails are personal ...
-2
votes
4answers
72 views

SPF, CloudFlare, Google Apps - Email sent through Contact Form marked as spam

One of the main reasons of putting your server behind CloudFlare is to hide your server's IP address so an attacker can't DDoS your IP and render CloudFlare obsolete. By putting your server behind ...
0
votes
2answers
26 views

Service to test outgoing mail for SPF/DKIM/SRS validity?

We're setting up a redirection-based mail server with a lot of complex moving parts, including the standard ones that apply to everyone like SPF/TLS as well as the more complex ones needed to ensure ...
0
votes
1answer
24 views

How do I specify the hostname SPF shows to users?

I have a production Magento site which is on a dedicated host. The machine has it's "hosting" name, host-123.hosting.com, as well as its public name, buystuffhere.com. DNS has been configured for ...
0
votes
1answer
27 views

SPF redirect to subdomain TXT does not work for Google?

Funny situation, and I'm not sure if this is my fault or Google's. I have a domain, example.com, which has 2 subdomains: main.example.com, and spf.example.com. For main.example.com domain, my TXT ...
-2
votes
1answer
32 views

My Email Strightly goes to gmail spam/just folder ( DKIM,SPF,DMARC is okay ) [duplicate]

( it's not duplicate , its related to rDNS , please don't flag it as duplicate or give me the link of related one ) i have a problem, my emails from my mydomain.com straightly goes to spam folder in ...
2
votes
1answer
40 views

Why does DNSstuff fail but SPF softfail?

Why does this online tool fail the SPF check http://www.dnsstuff.com/tools#spf|type=ipv4&&value=155.133.82.39&&email=fake@gmail.com But an installed Perl SPF check softfails the SPF ...
0
votes
1answer
43 views

Postfix, SPF, and Perl: warning: premature end-of-input on private/policy while reading input attribute name

I followed this guide (http://www.thenoccave.com/2013/05/08/centos-6-postfix-spf-checking/) but I'm getting the following errors in maillog: May 8 22:15:13 ip-172-31-15-65 postfix/smtpd[1999]: ...
0
votes
1answer
43 views

Exchange 2010 ignoring SPF record

we are using Exchange 2010 and have already setup SPF record for our authorized mail server IPs. As a test using our domain name i tried to send an e-mail from another computer on the internet which ...
0
votes
0answers
51 views

Gmail does not detect range of IPs on SPF record

I have recently setup a SPF record for our domain. We have an exchange server and a relay server which can send e-mails from our domain. Our exchange IP is xxx.xxx.xxx.78 and relay server is xxx.xxx....
0
votes
0answers
60 views

Setting up email forwarding in Exchange without SPF violations

I have an objective of configuring our mail server to forward inbound messages to third party provider. Mail have to appear from original sender Forwarding have to be managed from Exchange Server, ...
0
votes
1answer
214 views

Email abuse reports for outbound.protection.outlook.com

I've recently set up a DMARC record for my domain and now I'm receiving email abuse reports from hotmail.com that state: This is an email abuse report for an email message received from IP 104.47....
0
votes
2answers
64 views

IIS Smtp server cannot send to hotmail,outlook, etc addresses

I have a SMTP server on a Windows server 2008 R2. It can send messages to all other domains except the ones hosted at Microsoft (hotmail.com,outlook.com, etc). The email messages it cannot send remain ...
1
vote
0answers
47 views

Is it valid to have SPF records for a domain that is a CNAME?

I read that it's not valid to have a CNAME for a domain that also has its own SPF, because all records are taken from the domain that the CNAME points to. However, this doesn't seem to be what ...
33
votes
2answers
9k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
1
vote
1answer
83 views

How to include multiple spf domains with different mechanisms in a single spf TXT Record [duplicate]

EDIT : How to Mix the different mechanisms (a , mx , ip4 , ptr and include) to create single SPF file from 4 I know that 2 simple SPF records like v=spf1 include:_spf.google.com ~all v=spf1 ...
0
votes
1answer
37 views

DMARC failed, but SPF pass

If i sent a mail from my website (on a private server) to autoreply@dmarctest.org, i have this report : <record> <row> <source_ip>x.x.x.x</source_ip> <count>1&...
0
votes
2answers
65 views

Create wildcard SPF-record [duplicate]

For a customer I would like to implement SPF for a lot of domains they own, but most of the IP's are the same. I would like to create something like for example Google, so I can use the include: ...
-1
votes
1answer
44 views

Mail server with different IP than webserver - getting 554 error

I have a webshop running on a Digital Ocean droplet, while the email inbox for the same domain is running on a different VPS. All of the sudden some of the emails sent by the webshop are being ...
0
votes
0answers
16 views

Google puts my mails to spam [duplicate]

I have a mail server with proper (I think) configuration, but Google puts my mails to the spam folder. I see the following error in the source: Received-SPF: fail (google.com: domain of info@exmaple....
3
votes
1answer
148 views

exim4 configuration with SRS daemon

I'm struggeling setting up exim 4 with an external SRS daemon (Debian package srs). The srsd is running and converting addresses back and forward just fine. I can't use exim's built-in srs code, since ...
0
votes
1answer
45 views

Sender Policy Framework Qualifiers

RFC4408 defines the Sender Policy Framework (SPF). SPF has qualifiers ("-", "~", "+", "?") which are defined as (fail,softfail,pass,neutral) respectively. There is confusion amongst information ...
1
vote
1answer
37 views

SPF records and rejection based by declaration client IP

I use my personal email server one small setup by Microsoft Exchange Online. I'm not I professional IT but I prefer Exchange for many reason. Now I use this SPF record: v=spf1 include:spf....
0
votes
0answers
15 views

Postfix mail always in spam [duplicate]

I've installed and configured postfix trying to find the best way on the web. This is postfix main.cf: smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout =...
0
votes
2answers
57 views

Spam mail even after setting SPF

I have set the SPF record for my domain powered by Google Apps. I followed the steps here . But even after setting the SPF record, spam mails are being sent from the domain. What am I missing?
1
vote
2answers
99 views

Mandrill, AWS, Namecheap, SPF missing domain error

I'm trying to setup a Sending Domain on Mandrill but I get a SPF missing error. My APP is running on AWS, I'm using EC2 and Elastic Beanstalk, and my domain is on Namecheap. DNS are setup as follow: ...
1
vote
1answer
79 views

SPF record not being detected by gmail

I recently added SPF record to my server & it passes all the results required. However sending email doesn't detect SPF record. The method I use to detect is whether gmail shows 'mailed-by'. I ...
1
vote
2answers
45 views

Is DMARC helpful to me if I don't need reporting?

I have SPF and DKIM setup and working for the email domain I administer. The next recommended step is to setup DMARC since SPF and DKIM are both in place. What are the benefits of using DMARC if both ...
3
votes
2answers
330 views

Is Sender Policy Framework (SPF) effective in preventing Phishing emails?

As defined in RFC4408, Sender Policy Framework only checks the envelope sender (aka MAIL FROM). The From: header is not being tested. As it is the value of the From: header which is usually displayed ...