Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

33
votes
2answers
9k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
79
votes
6answers
40k views

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are so ...
23
votes
4answers
9k views

Best Practices for preventing you from looking like a spammer [duplicate]

I'd like to feel more confident setting up mail for my clients with regards to false positives. Here's what I know: SPF records are good, but not every spam filter service/software (SFSS) uses them....
6
votes
2answers
788 views

Failed SPF for email imported to Gmail because of client IP instead of server's in message when sent through SMTP from one local box to another

We have a linux (Debian) VPS with domain (let's say example.com with MX mail.example.com) that has SPF set up. There is dovecot+exim running. There is also Direct Admin on top of that. When I send a ...
9
votes
5answers
14k views

How do I configure SPF for multiple domains on a server? (also allowing gmail as a sender)

SPF (Sender Policy Framework) seems like a good way to combat spammers/spoofing. However, despite reading the explanations several times, I'm not quite understanding how to configure it correctly. ...
21
votes
6answers
21k views

Do SPF Records For Primary Domain apply to subdomains?

I have a quick question regarding SPF records: Do they need to be present for all subdomains? Lets say that I have a TXT record with SPF info for domain.com Let's also say that I have a seperate ...
3
votes
3answers
3k views

CNAME domain to another domain, but keep different SPF records for the two?

SCENARIO: mydomain.com is the main website, we do send/receive mail using address@mydomain.com. mydomain.com DNS has got an SPF record "v=spf1 a mx ~all" mydomain.net is just an alias for mydomain....
33
votes
5answers
582 views

Is it becoming impossible to be a small mail provider?

I operate a small mail server for my private emails, some friends who have websites and two NGOs. In total my server sends between 60 and 400 messages a day. Now a lot of these emails are personal ...
13
votes
2answers
5k views

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has include:foo....
9
votes
4answers
1k views

SPF - should I implement?

A request has been made by a web developer for our domain DNS records to include SPF TXT records. I found differing opinions on this out there... Any comments or insights you can offer will be highly ...
2
votes
3answers
4k views

How to set SPF record?

I have configured postfix to use mail.example.com I have many virtual domains, like: domain1.com domain2.com domain3.com My question is, how to set the SPF? Do I have to set SPF for each domain ...
2
votes
3answers
2k views

SMTP host name vs. domain in “From:” address vis-a-vis Email Deliverability

I'm trying to implement (or make sure that I'm correctly following) email sending best practices to improve deliverability, but the role of the smtp server's host name vs the domain name of the From: ...
1
vote
1answer
52 views

Originating (non-critical) emails from a “less-trusted” host

Background We have a webapp running on webapp.example.com that (amongst other things) sends messages by email from time to time. These messages are non-critical: whilst we would like to make a best ...
0
votes
1answer
701 views

Email authentication without modifying DNS records

Can someone explain how Mailchimp does email authentication without user having to update SPF or DKIM records? Quote from Mailchimp: When you use MailChimp's authentication, campaigns will pass ...
6
votes
1answer
3k views

Amazon SES e-mails ending in Yahoo & Hotmail Spam folders, even though SPF and SenderID and DKIM are set correctly

This is incredibly frustrating. My Amazon SES e-mails are ending in Yahoo & Hotmail Spam folders, even though my SPF, SenderID, and DKIM are setup correctly. Since this particular site requires ...
5
votes
6answers
9k views

Emails going to Junk for Hotmail recipients [duplicate]

We send daily mass emails to our customers (~30,000+ emails per day). We have problems with Hotmail users receiving our emails. Sometimes the email goes to the Junk folder, but often it will got to ...
16
votes
4answers
7k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
15
votes
1answer
9k views

Multiple SPF records for multiple domains

We have recently started using Office 365 for our email, which requires us to add a DNS TXT record with the value v=spf1 include:spf.protection.outlook.com -all. We already have an SPF record with the ...
8
votes
3answers
2k views

Do changes in SPF records take time to propagate?

I'm setting up SPF records for my domain, and am not getting the results that I expect. It's quite possible I'm making some sort of mistake, but first I'd like to ask: does it take time for the ...
6
votes
5answers
6k views

Email sent from server with rDNS & SPF being blocked by Hotmail

I have been unable to send email to users on hotmail or other Microsoft email servers for some time. Its been a major headache trying to find out why and how to fix the issue. The emails being sent ...
6
votes
1answer
2k views

Why is SPF being validated against my mail server's IP instead of sender's IP?

I have a mail server "example.com" which forwards all emails with recipient "me@example.com" to "me@gmail.com". My mail server runs Postfix and it uses the virtual_alias_maps mechanism to perform the ...
2
votes
1answer
8k views

SPF softfail for forwarded emails to Gmail account

I've been able to make SPF pass on all the sent emails from my Postfix server. But for forwarded domains which simply redirect email to my gmail id I see softfail in the SPF. For example if I send ...
6
votes
1answer
571 views

Should SPF records provided by ISPs contain “all” at the end?

This seems obvious or something I just don't understand. I want to build SPF records for my clients. Most of the email providers provide an SPF record that I can "include" in mine, but they all ...
6
votes
1answer
6k views

DKIM and SPF for a subdomain

I manage a VPS on Linode accessed through subdomain.example.com and I need to send email from this subdomain. I can't set any TXT records in Linode DNS manager because the name servers for example.com ...
2
votes
2answers
4k views

Forward Mails to Gmail

I have a postfix mailserver running. Mails sent from users to Gmail are showing up in Gmail, so it works in general. Same for all other freemail hosts I know. The problem is that some users have no ...
1
vote
3answers
2k views

SPF include: too many IP addresses

I've hit a snag with SPF. The SPF record for my domain will contain four or five entries, plus it will contain: include:sgizmo.com The SPF record for sgizmo.com contains eleven entries! This, plus ...
0
votes
2answers
4k views

Yahoo flagging mail as spam when using relay server

I'm using Postfix to relay mail from my site to my mail server. Mail is received properly at my Gmail and Hotmail accounts - only Yahoo is the problem. The Yahoo mail headers state: Received-SPF: ...
0
votes
3answers
5k views

Hotmail wants me to modify my SPF record

This is my current SPF record. It works well with gmail and yahoo but hotmail was ignoring. So i used their submit system and now they replied me with the text below. This is my current spf v=spf1 a ...
6
votes
1answer
9k views

Why is Google rejecting mails forwarded from my Postfix server?

I've set up Postfix and created an alias that maps to a gmail account. When I mail from one of my own (google mail) accounts, it goes through, but if someone from the outside mails me, Google won't ...
2
votes
1answer
356 views

How to prevent emails from my domain through mailing lists to be rejected due to DMARC

I operate my own mail server at speedofsoundgaming.com and mwtd.net. I recently added a DMARC record to my domain to help prevent spam, and once seeing that things seemed to be working, upped the ...
2
votes
3answers
931 views

Wildcard configured emails allow spammers to deliver mail? (SPF: “softfail”)

I have a Google Apps account set up for one of my domains. Wildcard email delivery is enabled on this domain for all emails (ie. anything@domain.com passes emails along to myemail@domain.com), and the ...
1
vote
1answer
2k views

Configuring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP servers

Today we realized that all of our emails being sent to email addresses of the type <username>@corporatedomain.com were getting rejected. I don't know who is hosting the email for corporatedomain....
1
vote
1answer
971 views

Spf passes or fails depending on receiver address

I have postfix with dovecot set up on Ubuntu 13.10. I send emails via a node application (using email-templates). If I send an email from noreply@mydomain.com to myacccount@gmail.com (email 1), the ...
0
votes
1answer
342 views

550 error emailing on behalf of clients using spf

In response to the answers to this question I tried to set up the correct 'from', 'sender' and 'return-path'. I am not sure how this is set up in .net (particularly 'return-path'), but I have set the ...
0
votes
1answer
276 views

PermError SPF Too Many Lookups and Reduction

My current SPF record is as follows: v=spf1 mx include:servers.mcsv.net include:xero.com -all The above cause the SPF validation to fail. Using http://mxtoolbox.com/SuperTool.aspx?action=txt, I ...
0
votes
1answer
256 views

Mails going to spam. Please see the details [duplicate]

My hostname is properly set up. Host file has proper entries. Mail header shows SPF pass. IP is not balcklisted. Mail body is also fine. Only thing don't have is DKIM setup. Now I have got two ...
0
votes
1answer
5k views

SPF Records - mechanism not recognized by this client. unknown mechanisms:

Having a bit of a problem with my hosting company rackspace cloud and SFP records. I asked them to updated it on there DNS. This is what they set it as: seonky.com. 300 IN TXT "v=spf1 ip4:ubuntu ...
0
votes
1answer
199 views

Failed Gmail SPF check when importing mail through IMAP from our mailbox when original email was sent with ESMTP headers

We have a strange situation: we receive an email with ESMTP headers in it our server accepts it, it's fine we import that mail in Gmail like any other emails from our boxes Gmail makes SPF check ...
-1
votes
3answers
5k views

550 Requested action not taken: mailbox unavailable

I setup a small box with Server 2003 64bit to be used as a webserver and email server for a small school. Real simple stuff for a few users. A simple website and a handful of emails. rDNS and spf ...
-1
votes
1answer
165 views

spf record entry

I have two DNS zone files can anyone please tell me in which one I have to add an SPF record? Zone (localhost.zone): $TTL 86400 @ IN SOA @ root ( ...