Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

0
votes
2answers
47 views

Spam delivered by mx.google.com despite SPF fail

Some spammer use our e-mail address as sender in forged e-mails. Now we got thousands of bounced messages from no longes existing e-mails. We set up SPF and DKIM records but it does not stop. ...
1
vote
0answers
24 views

How to troubleshoot marketing e-mail inbox rate / deliverability? [duplicate]

After previously using managed ESP's, we've recently switched over to our own server (CentOS 6) that's set up to send bulk e-mails with 12 IPs/SPF/DKIM. Campaigns are processed and sent via ...
-1
votes
0answers
26 views

SPF record definition [duplicate]

I'm stuck on how to create SPF records for a mail server that is hosting multiple domains. I have the following: DOMAINA.COM A Record - main-1.domaina.com CNAME Record - mail.domaina.com MX Record ...
2
votes
1answer
40 views

SPF records clarification of using A mechanism

What is the difference between using v=spf1 a ~all and v=spf1 ip4:IP_OF_A_RECORD ~all or v=spf1 IP_OF_A_RECORD ~all when configuring SPF records? Which way is correct and more robust and reliable?
3
votes
6answers
4k views

Hotmail and Live.com rejecting all emails [duplicate]

I have been having problems sending emails from my server to hotmail.com and live.com email addresses. I have read other posts on serverfault but they have not been helpful. Here is the error message. ...
4
votes
2answers
1k views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has ...
1
vote
1answer
34 views

Originating (non-critical) emails from a “less-trusted” host

Background We have a webapp running on webapp.example.com that (amongst other things) sends messages by email from time to time. These messages are non-critical: whilst we would like to make a best ...
2
votes
0answers
57 views

SPF check based on client IP instead of MTA IP?

Setup On a client computer with IP address a.a.a.a, there is a mail client that uses SMTP to send emails via company email server example.com with IP address b.b.b.b. The company email server ...
3
votes
2answers
162 views

Route 53 - Should I duplicate my SPF records as TXT records?

Amazon Route 53 supports both "SPF Records" and "TXT Records". Most documentation I read tells me to list my SPF Record as a TXT Record. I understand that the SPF Record is a newer standard. Is it ...
0
votes
1answer
31 views

Proper Setup of SPF Record

OK, so, i'm only so familiar with how the SPF system works, and my domain is being used to send all kinds of spam. Here is my current spf record: v=spf1 ip4:web.host.ip ip4:108.60.203.190 +a +mx ...
0
votes
1answer
50 views

Gmail ignoring SPF record

I have a domain whose SPF record looks like this: "v=spf1 mx ip4:6.7.8.9 -all". The record is valid, and to my understanding implies that allow mails only from: The server that is MX record for the ...
0
votes
1answer
946 views

Changing SPF (Sender Policy Framework) record for Google Apps [closed]

My boss asked me to set up Google Apps for a client and basically I have done everything including setting up MX records in DirectAdmin and re-creating the email accounts in Google Apps. I also sent ...
-1
votes
2answers
39 views

AWS: Kitterman SPF record test failing

I have had a couple of emails not arrive in my inbox. One resent the email and I received it, the other told me that the error was: non valid MX response I have been looking at my AWS SPF records and ...
3
votes
2answers
1k views

What is the email SPF entry for sending from Yahoo!?

I have a client that is sending email from a Yahoo! Plus account as if from her own domain. Is there a way to set up the SPF record so that it covers all of Yahoo!'s outgoing servers? i.e., what do I ...
7
votes
3answers
98 views

Does “~all” in the middle of an SPF record signal the end of the record when it is parsed?

Our company's SPF record format is as follows: "v=spf1 include:_spf.google.com ~all a mx ip4:X.X.0.0/23 include:spf.example.com ?all" So we have an "~all" in the middle of our SPF record. On the ...
0
votes
1answer
103 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
1
vote
1answer
50 views

Conflict between wildcard DNS entry and SPF

I have a domain set up on Amazon's Route53, and it seems the following entries are not going to work (actual values replaced, obviously). Can anyone advise on how this should be set up? This is the ...
1
vote
2answers
154 views

DNS and SPF configuration for Microsoft Exchange

We've started receiving spam with spoofed addresses from our own domain. So I'm trying to get my PTR and SPF records etc correct to prevent it. We're running Exchange 2010 on site with one server ...
12
votes
2answers
3k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
1
vote
1answer
77 views

How should my SPF record be set up, or is it even necessary?

I have a domain (fiestyturtles.com) registered at namecheap.com, and hosted at a shared webhost (hostpc.com). But I've moved the email handling of my domain to google apps, I think I set this up by ...
0
votes
0answers
13 views

What is the correct SPF setting if I want a specific IP, hosting provider's MX, and GMail to work for sending emails coming from my domain? [duplicate]

I have never set up an SPF record, so I am trying to make sure I understand what I am doing before causing all sorts of havoc. Let's say I have a domain example.org which is being hosted by ...
17
votes
2answers
4k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
5
votes
3answers
531 views

Have a valid SPF record but still can spoof my email

I have set up an SPF record for my domain, but I still can spoof email-addresses for my domain using fake email services like this one: http://deadfake.com/Send.aspx The email does arrive to my gmail ...
-2
votes
1answer
38 views

Adding SPF record for second domain, but I don't yet have an SPF record for Gmail [duplicate]

I am familiar with the basics of SPF but I am having trouble determining exactly what I need for my setup. I have my email done through Google Apps to send and receive email for my domain, ...
5
votes
5answers
879 views

SMTP server, SPF records, domainkeys

Recently we have setup a new SMTP server to send newsletters and promotional mails to our registered users. There are 5000 users who will receive newsletters on weekly basis. We are getting bounced ...
1
vote
1answer
548 views

FROM: header is forged, SENDER: is legit , spam is delivered. how to detect?

In short: What happens: FROM: header is forged, SENDER: is legit , spam is delivered. What I need: Detect forged FROM: header when possible, block delivery Explained: I have a exim server that ...
-2
votes
3answers
100 views

Is there any standard for DNS <-> IP authentication?

I'm looking to implement an authentication mechanism which allows to enforce access policies based on the domain name of the client. The authentication server uses the information available in the DNS ...
0
votes
2answers
47 views

Multiple SPF DNS Record entries

We are currently in the process of migrating our on-premise Exchange environment to the O365 cloud but in the meantime I need setup a SPF record for current outgoing email and for the O365 pilot ...
9
votes
4answers
815 views

SPF - should I implement?

A request has been made by a web developer for our domain DNS records to include SPF TXT records. I found differing opinions on this out there... Any comments or insights you can offer will be highly ...
53
votes
6answers
17k views

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are ...
0
votes
2answers
2k views

Correct SPF Record Usage? [duplicate]

My txt entry for my domain is as follows: "v=spf1 a ip4:aspmx.googlemail.com ptr:aspmx.googlemail.com include:aspmx.googlemail.com -all" I have also tried to use ptr in addition to a. However, ...
4
votes
1answer
298 views

What does MX in SPF mean? [duplicate]

I'm setting up an email server, and I'm a bit confused by SPF. Following some examples, I set my SPF record as follows... v=spf1 mx ip4:1.2.3.4 mx:mail.mydomain.com ptr:1.2.3.4 -all I follow what ...
1
vote
2answers
437 views

Mail goes to spam when using `mail` from command line

I've a CentOS 6.4 server. When I send an email using the mail command from command line, it's always marked as spam by Gmail. So, every system emails go to spam and so do every emails sent with a PHP ...
3
votes
1answer
93 views

Why am I getting these emails?

Awhile ago I noticed that email messages from my domain is not immediately delivers by google, and I'm getting an smtp error message from google server. I don not remember the exact wording of that ...
6
votes
2answers
244 views

Failed SPF for email imported to Gmail because of client IP instead of server's in message when sent through SMTP from one local box to another

We have a linux (Debian) VPS with domain (let's say example.com with MX mail.example.com) that has SPF set up. There is dovecot+exim running. There is also Direct Admin on top of that. When I send a ...
0
votes
2answers
73 views

I am able to receive mails but unable to send via my SMTP server?

I have a shared hosting server from hostgator, in which I created an email 'support@mydomain.com'. Then I enabled both DKIM and SPF (as I read on a few threads that SPF should be enabled to ensure a ...
7
votes
2answers
1k views

What are the correct SPF records to allow both local and Google Apps delivery

We have recently moved our server stack to a new data farm, and some of our clients are experiencing issues with mail being sent from their GApps accounts. Before the server move we had no issues, but ...
1
vote
2answers
2k views

How to include domain mail server along with Google mail server in SPF record?

I've recently switched to Google Apps and this thread http://www.google.com/support/a/bin/answer.py?answer=178723 suggests to update SPF record like : 'v=spf1 include:_spf.google.com ~all' . (1) ...
5
votes
3answers
8k views

How to format and where to put the SPF TXT record?

EDIT I think I more or less understand the syntax and, anyway, Google is giving, in the link below, the syntax needed. My question is really where to put that stuff. Should I quote every field? The ...
0
votes
2answers
4k views

cPanel Server Email to Gmail marked as Spam, SPF, DKIM, and rDNS pass

Having this issue on a cPanel server 11.34.1 that hosts multiple domains. Email originating from this box on the sendingdomain.com address is flagged as Spam by Gmail. I've implemented SPF and DKIM, ...
2
votes
2answers
58 views

Order emails from online shop not delivered due to SPF errors

I have my domain served by two servers with different IP addresses: one for main website and another for online shop. When a customer places an order, among other things, an email is being sent to an ...
0
votes
1answer
77 views

Failed Gmail SPF check when importing mail through IMAP from our mailbox when original email was sent with ESMTP headers

We have a strange situation: we receive an email with ESMTP headers in it our server accepts it, it's fine we import that mail in Gmail like any other emails from our boxes Gmail makes SPF check ...
0
votes
1answer
86 views

SPF records when sending multi-domain emails from one host

We have a CMS system in which multiple customers run their websites from a single virtual machine. Pages generated by the CMS allow forms to be filled in, which trigger emails to be sent. I am having ...
0
votes
1answer
550 views

How can I add a secondary DNS server for specific record types?

My hosting provider won't support certain DNS records (SPF, long CNAMEs, etc), but I refuse to switch providers. I have my own local DNS with a forward zone for my domain, and I'd like to use my ...
10
votes
3answers
7k views

How to setup a SPF record to help fight SPAM

My little developer mind never really managed to understand how to do it, so maybe you can help me. I'm using Google Apps for Domains and MyDomain as DNS external service. Edit: Tough crowd, in ...
3
votes
1answer
54 views

SPF record for my domain is not being detected

I have a domain (qplum.co) set up at NameCheap. I am trying to set a TXT record for setting up SPF for Mandrill but for some reason, this record is not being detected at all by any of the tools. This ...
0
votes
1answer
47 views

Can I use include and redirect in same SPF record?

My current SPF record is as below Host Value TTL myexampledomain.com "v=spf1 redirect=_spf.mailhostbox.com" 1 Day I am using 2 free email ...
1
vote
1answer
209 views

PermError SPF Permanent Error: Void lookup limit of 2 exceeded

I am trying to setup SPF on a server - mail works fine and validates according to mxtoolbox and other online checks but when I check it using http://www.kitterman.com/spf/validate.html I get an error: ...
0
votes
1answer
29 views

Dynamically set SRS_DOMAIN

I have a mailserver forwarding mail and using postsrsd for SRS. Since postsrsd uses postfix's mydomain setting to alter the Return-Path, is there a way to set the SRS_DOMAIN for forwarded mail based ...
-1
votes
1answer
29 views

spf record fail on forwarded mail

I've set up Postfix, Dovecot and MySQL according to this tutorial from linode. In the virtual aliases table I have an account which forwards to my gmail. Because these messages are then being ...