Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

0
votes
0answers
11 views

Google Apps + SparkPost/Mandrill in one domain?

I have PHP application - uses external SMTP server (SparkPost/Mandrill). I do not want my mail server. Manual mail is Google Apps. Can I connect mail and automatic external smtp on DNS? system@...
0
votes
1answer
20 views

Why does SPF_Not_Pass reject on “neutral” result?

I have troubles understanding the default HELO checking policy of policyd-spf. RFC 4408 states in section 2.5.2, that A "Neutral" result MUST be treated exactly like the "None" result But the ...
16
votes
1answer
10k views

Multiple SPF records for multiple domains

We have recently started using Office 365 for our email, which requires us to add a DNS TXT record with the value v=spf1 include:spf.protection.outlook.com -all. We already have an SPF record with the ...
0
votes
2answers
55 views

Change the domain in the 'via' that Gmail shows as the result of a wrong SPF record

So I have a small Linux webserver, it is running the Direct Admin control panel and everything is working fine. For each domain, SPF and DKIM records are present in the DNS and mail is (as far as I ...
1
vote
4answers
589 views

How do SPF records reduce spam?

How do SPF records reduce spam? Note: I'm not asking how to setup an SPF record; I already know how to do this. Does the receiving mail server lookup the SPF record and determine if where the mail is ...
1
vote
1answer
108 views

How to include multiple spf domains with different mechanisms in a single spf TXT Record [duplicate]

EDIT : How to Mix the different mechanisms (a , mx , ip4 , ptr and include) to create single SPF file from 4 I know that 2 simple SPF records like v=spf1 include:_spf.google.com ~all v=spf1 ...
0
votes
0answers
26 views

Adding DNS entry with SBS2011

I would like to enter a SPF entry on our DNS server. The Microsoft help page is broken for some time and I don't have a clue on what I have to do on my own ( it doesn't seem it's as easy as adding a ...
0
votes
1answer
29 views

Spf record processing speed

I send email through a service provider smtp server that uses a domain different than mine. My email client uses smtp1.provider.net to send emails, but usually the message is routed through smtp2....
1
vote
3answers
60 views

Exchange 2010 ignoring SPF record

we are using Exchange 2010 and have already setup SPF record for our authorized mail server IPs. As a test using our domain name i tried to send an e-mail from another computer on the internet which ...
1
vote
3answers
100 views

mails fom my mailserver go to spam folder of hotmail.com [duplicate]

I set up a mail server with dovecot/postfix on a debian server. I don't send commercial mail or newsletters. We are only 4 users and nobody send SPAM. We only send classical mails (no large pictures ...
8
votes
3answers
2k views

Do changes in SPF records take time to propagate?

I'm setting up SPF records for my domain, and am not getting the results that I expect. It's quite possible I'm making some sort of mistake, but first I'd like to ask: does it take time for the ...
0
votes
2answers
48 views

Spf A record for a second domain

I need to use this spf record on example.com domain: example.com. IN TXT "v=spf1 a mx a:smtp.second.net -all" I'd like to know if a client sending an email from bob@example.com domain will pass ...
1
vote
2answers
48 views

Merging SPF records

I have one SPF record: v=spf1 a mx ip4:111.111.111.111 -all and I need to add one more: v=spf1 ip4:222.222.222.222 include:_spf.example.net ~all How to merge them correctly? Is v=spf1 ip4:222....
1
vote
2answers
93 views

Allowing a partially trusted server to send mail for one given address via SPF / DKIM

I run a web service that should be able to send out e-mails using a company address, e.g. foo@company.com. I do not, however, want to give this service access to the mail server of company.com (for ...
5
votes
1answer
7k views

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com (mail-yx0-f172.google....
-3
votes
1answer
27 views

SPF Error with redirection

so I have this crazy SPF-Policy problem which looks like that: I have a private domain like 'my-private-domain.com'. This one I'm hosting myself on a vServer and I activated SPF and added the SPF ...
0
votes
1answer
56 views

Cant sent mail from own server to google

I'm running a mail server and I'm having problem with sending mails to google. Mails to other providers work fine. I guess its maybe related to my DNS settings, as I've read that google is quite ...
1
vote
2answers
32 views

sending emails from different Smtps in different IPs

I sent mails with different Smtps for example Smtp1 on IP 1.1.1.1 and Smtp2 on IP 2.2.2.2 . which my spf record for the From (info@myDoamin.com) part in emails is : spf1 include:mail.mydomain....
0
votes
1answer
33 views

slow e-mail delivery, soft spf notification

we have a server that saves and forwards e-mails to my own google mail (=peter@nowhow.be). These mails are delayed, and when looking at the mail source, I noticed this spf softfail: (google.com: ...
0
votes
1answer
42 views

Can I retrieve email marked as rejected in the SMTP log?

I am using a Sophos UTM 9 SG210 firewall and noticed in the SMTP log that a formerly trusted sender has had 50 legitimate emails rejected. I've since added them to an exemption list, but was ...
0
votes
1answer
72 views

Why don't my domain's messages to a google group get their headers rewritten so DMARC can pass?

Whenever my domain sends a message to a google group on another domain the DMARC alignment fails. This is true for all my approved senders, even using Gmail in my domain. It seems to be because the ...
17
votes
4answers
7k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
2
votes
2answers
369 views

Only enable SRS when forwarding to enable DMARC

I am setting up a mail server on my VPS and in order to prevent spam and being marked as spam I have enabled SPF, DKIM and DMARC. However, I do not want to host my own mailbox, so I forward the ...
6
votes
2answers
2k views

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it ...
2
votes
3answers
210 views

SPF Record bypassed

I just received an email from feedback@ranelaghhouse.com to feedback@ranelaghhouse.com which was caught by my catch-all and emailed to me. Below are the headers for the email which show that it was ...
0
votes
2answers
308 views

How to setup postfix to check SPF record only for domains that i want to check

I have working postfix server. It configured with amavis and uses pretty good SMTP headers control. But sometimes my users receive spam from spammers with well known mail service providers addresses. ...
1
vote
1answer
27 views

SPF redirect modifier

The SPF record for domain replace the current record. The macro-expanded domain is also substituted for the current-domain in those look-ups. Examples: In the following example, the ...
33
votes
5answers
607 views

Is it becoming impossible to be a small mail provider?

I operate a small mail server for my private emails, some friends who have websites and two NGOs. In total my server sends between 60 and 400 messages a day. Now a lot of these emails are personal ...
-2
votes
4answers
77 views

SPF, CloudFlare, Google Apps - Email sent through Contact Form marked as spam

One of the main reasons of putting your server behind CloudFlare is to hide your server's IP address so an attacker can't DDoS your IP and render CloudFlare obsolete. By putting your server behind ...
0
votes
2answers
36 views

Service to test outgoing mail for SPF/DKIM/SRS validity?

We're setting up a redirection-based mail server with a lot of complex moving parts, including the standard ones that apply to everyone like SPF/TLS as well as the more complex ones needed to ensure ...
0
votes
1answer
25 views

How do I specify the hostname SPF shows to users?

I have a production Magento site which is on a dedicated host. The machine has it's "hosting" name, host-123.hosting.com, as well as its public name, buystuffhere.com. DNS has been configured for ...
0
votes
1answer
27 views

SPF redirect to subdomain TXT does not work for Google?

Funny situation, and I'm not sure if this is my fault or Google's. I have a domain, example.com, which has 2 subdomains: main.example.com, and spf.example.com. For main.example.com domain, my TXT ...
-2
votes
1answer
34 views

My Email Strightly goes to gmail spam/just folder ( DKIM,SPF,DMARC is okay ) [duplicate]

( it's not duplicate , its related to rDNS , please don't flag it as duplicate or give me the link of related one ) i have a problem, my emails from my mydomain.com straightly goes to spam folder in ...
2
votes
1answer
48 views

Why does DNSstuff fail but SPF softfail?

Why does this online tool fail the SPF check http://www.dnsstuff.com/tools#spf|type=ipv4&&value=155.133.82.39&&email=fake@gmail.com But an installed Perl SPF check softfails the SPF ...
0
votes
1answer
68 views

Postfix, SPF, and Perl: warning: premature end-of-input on private/policy while reading input attribute name

I followed this guide (http://www.thenoccave.com/2013/05/08/centos-6-postfix-spf-checking/) but I'm getting the following errors in maillog: May 8 22:15:13 ip-172-31-15-65 postfix/smtpd[1999]: ...
0
votes
0answers
53 views

Gmail does not detect range of IPs on SPF record

I have recently setup a SPF record for our domain. We have an exchange server and a relay server which can send e-mails from our domain. Our exchange IP is xxx.xxx.xxx.78 and relay server is xxx.xxx....
0
votes
0answers
79 views

Setting up email forwarding in Exchange without SPF violations

I have an objective of configuring our mail server to forward inbound messages to third party provider. Mail have to appear from original sender Forwarding have to be managed from Exchange Server, ...
0
votes
1answer
263 views

Email abuse reports for outbound.protection.outlook.com

I've recently set up a DMARC record for my domain and now I'm receiving email abuse reports from hotmail.com that state: This is an email abuse report for an email message received from IP 104.47....
0
votes
2answers
77 views

IIS Smtp server cannot send to hotmail,outlook, etc addresses

I have a SMTP server on a Windows server 2008 R2. It can send messages to all other domains except the ones hosted at Microsoft (hotmail.com,outlook.com, etc). The email messages it cannot send remain ...
1
vote
0answers
48 views

Is it valid to have SPF records for a domain that is a CNAME?

I read that it's not valid to have a CNAME for a domain that also has its own SPF, because all records are taken from the domain that the CNAME points to. However, this doesn't seem to be what ...
33
votes
2answers
9k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
0
votes
1answer
57 views

DMARC failed, but SPF pass

If i sent a mail from my website (on a private server) to autoreply@dmarctest.org, i have this report : <record> <row> <source_ip>x.x.x.x</source_ip> <count>1&...
0
votes
2answers
66 views

Create wildcard SPF-record [duplicate]

For a customer I would like to implement SPF for a lot of domains they own, but most of the IP's are the same. I would like to create something like for example Google, so I can use the include: ...
-1
votes
1answer
48 views

Mail server with different IP than webserver - getting 554 error

I have a webshop running on a Digital Ocean droplet, while the email inbox for the same domain is running on a different VPS. All of the sudden some of the emails sent by the webshop are being ...
0
votes
0answers
17 views

Google puts my mails to spam [duplicate]

I have a mail server with proper (I think) configuration, but Google puts my mails to the spam folder. I see the following error in the source: Received-SPF: fail (google.com: domain of info@exmaple....
3
votes
1answer
159 views

exim4 configuration with SRS daemon

I'm struggeling setting up exim 4 with an external SRS daemon (Debian package srs). The srsd is running and converting addresses back and forward just fine. I can't use exim's built-in srs code, since ...
0
votes
1answer
45 views

Sender Policy Framework Qualifiers

RFC4408 defines the Sender Policy Framework (SPF). SPF has qualifiers ("-", "~", "+", "?") which are defined as (fail,softfail,pass,neutral) respectively. There is confusion amongst information ...
1
vote
1answer
38 views

SPF records and rejection based by declaration client IP

I use my personal email server one small setup by Microsoft Exchange Online. I'm not I professional IT but I prefer Exchange for many reason. Now I use this SPF record: v=spf1 include:spf....
0
votes
0answers
15 views

Postfix mail always in spam [duplicate]

I've installed and configured postfix trying to find the best way on the web. This is postfix main.cf: smtpd_tls_security_level = may smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout =...
0
votes
2answers
60 views

Spam mail even after setting SPF

I have set the SPF record for my domain powered by Google Apps. I followed the steps here . But even after setting the SPF record, spam mails are being sent from the domain. What am I missing?