Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

learn more… | top users | synonyms

43
votes
6answers
8k views

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are ...
20
votes
4answers
3k views

Best Practices for preventing you from looking like a spammer [duplicate]

I'd like to feel more confident setting up mail for my clients with regards to false positives. Here's what I know: SPF records are good, but not every spam filter service/software (SFSS) uses ...
16
votes
4answers
16k views

How to include multiple domains in an spf TXT Record

I am looking to setup a TXT spf record that has 2 included domains... individually: v=spf1 include:_spf.google.com ~all and v=spf1 include:otherdomain.com ~all What is the proper way of ...
16
votes
4answers
14k views

Will adding a second SPF record mess up my DNS?

Will adding a second SPF record mess up my DNS, or will it be like adding an extra nameserver? (i.e. it only helps, not hurts)
12
votes
4answers
7k views

Do SPF Records For Primary Domain apply to subdomains?

I have a quick question regarding SPF records: Do they need to be present for all subdomains? Lets say that I have a TXT record with SPF info for domain.com Let's also say that I have a seperate ...
10
votes
2answers
2k views

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer ...
10
votes
3answers
6k views

What's the proper format for an SPF record?

Querying my domain I get: The TXT records found for your domain are: v=spf1 ip4:50.22.72.198 a mx:wordswithfriends.net ~all So superficially it appears OK. However I also get the following ...
10
votes
3answers
6k views

How to setup a SPF record to help fight SPAM

My little developer mind never really managed to understand how to do it, so maybe you can help me. I'm using Google Apps for Domains and MyDomain as DNS external service. Edit: Tough crowd, in ...
10
votes
3answers
3k views

Gmail rejects emails. Openspf.net fails the tests

I've got a problem with Gmail. It started after one of our trojan infected PCs sent spam for one day from our IP address. We've fixed the problem, but we got into 3 black lists. We've fixed that, ...
9
votes
4answers
3k views

set Google Apps SPF record in Amazon AWS Route 53

I'm using the new AWS GUI for Route 53 to setup my domain records. However, the AWS console won't accept the recommended Google Apps SPF record, v=spf1 include:_spf.google.com ~all (found here). It ...
9
votes
1answer
2k views

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes ...
9
votes
1answer
104 views

What takes precedence: an SPF record with “-all” in the primary TXT record, or one in the “include” section?

Suppose I have a domain (company.com) with an SPF that looks like this: v=spf1 ip4:70.70.70.70 include:host.marketing.com -all and "host.marketing.com" looks like this v=spf1 ip4:8.8.8.8 ~all ...
8
votes
4answers
683 views

SPF - should I implement?

A request has been made by a web developer for our domain DNS records to include SPF TXT records. I found differing opinions on this out there... Any comments or insights you can offer will be highly ...
8
votes
5answers
12k views

How do I configure SPF for multiple domains on a server? (also allowing gmail as a sender)

SPF (Sender Policy Framework) seems like a good way to combat spammers/spoofing. However, despite reading the explanations several times, I'm not quite understanding how to configure it correctly. ...
8
votes
1answer
1k views

Office365 SPF record has too many lookups

For some utterly ridiculous administrative reasons we've got a split domain with one mailbox on Office365 which requires us to add include:outlook.com to our SPF record. The problem with this is that ...
7
votes
2answers
2k views

GMail suspects confirmation email in stealing personal information

When user registers on my web site, web site sends user email confirmation link. Subject: Please confirm your email address Body:Please open this link in your browser to confirm your email address: ...
6
votes
4answers
1k views

Why does my mail get marked as spam?

I Have the server "afspraakmanager.be". It matches everything not to be a spam server.(it isn't by the way): it has reverse dns, spf,dkim,... . But hotmail marks it as spam. I think the problem is ...
6
votes
2answers
453 views

What are DNS TXT records and why are they needed

I am creating a server with a primary nameserver and mutliple domains. Do i need to make TXT records for all the domain, they all have there own email, but use the mailserver from the primary. EDIT: ...
6
votes
2answers
460 views

Why is email being delivered normally despite an SPF “hardfail”?

I'm trying to figure out why forged email is being delivered to major email providers (gmail.com, outlook.com) even though email is marked with an SPF hardfail. The email is also delivered to ...
6
votes
3answers
2k views

What's wrong with my SPF?

When I receive an email on Google from my domain ("mail.gramma.ro") I see this in the headers: Received-SPF: softfail (google.com: best guess record for domain of transitioning cristi@gramma.ro does ...
6
votes
1answer
329 views

Should SPF records provided by ISPs contain “all” at the end?

This seems obvious or something I just don't understand. I want to build SPF records for my clients. Most of the email providers provide an SPF record that I can "include" in mine, but they all ...
6
votes
2answers
998 views

What are the correct SPF records to allow both local and Google Apps delivery

We have recently moved our server stack to a new data farm, and some of our clients are experiencing issues with mail being sent from their GApps accounts. Before the server move we had no issues, but ...
6
votes
5answers
4k views

Email sent from server with rDNS & SPF being blocked by Hotmail

I have been unable to send email to users on hotmail or other Microsoft email servers for some time. Its been a major headache trying to find out why and how to fix the issue. The emails being sent ...
6
votes
2answers
4k views

Google Apps, SPF, softfail problem (validates with validation tools, but still softfails otherwise)

I guess this is probably a commonly asked and boring question but I'm really at a loss and I don't know what else to do. This might be a duplicate of other questions, but none of the solutions worked ...
5
votes
2answers
7k views

How to specify multiple included domains in SPF record?

Our business email is hosted on Google apps. In addition, our web server may also send email. Currently our SPF record in DNS looks like this: domain.com. IN TXT "v=spf1 a ...
5
votes
3answers
2k views

PTR OK, SPF, DKIM passed but email messages are marked as Spam by Google?

# host 1.2.3.4 4.3.2.1.in-addr.arpa domain name pointer mail.domain.vn. # dig +short txt domain.vn "v=spf1 a mx ptr -all" # dig +short txt mail.domain.vn "v=spf1 a -all" Here's an email header ...
5
votes
1answer
1k views

Is it OK to have multiple TXT records for a single domain containing different SPF entries?

A remote recipient domain is rejecting mail on the grounds of SPF and I think it's because the sender has SPF configured incorrectly. When I run dig, I see: [fooadm@box ~]# dig @8.8.8.8 -t TXT ...
5
votes
3answers
8k views

Why is my SPF Record not working?

A spammer is using my domain to send spam, and I'm receiving a large amount of bounced email. I have an SPF record on the domain, however it doesn't appear to be having any effect. Receiving MTA's ...
5
votes
1answer
2k views

SPF include vs redirect

What is the difference?
5
votes
1answer
140 views

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it ...
5
votes
6answers
7k views

Emails going to Junk for Hotmail recipients

We send daily mass emails to our customers (~30,000+ emails per day). We have problems with Hotmail users receiving our emails. Sometimes the email goes to the Junk folder, but often it will got to ...
5
votes
5answers
839 views

SMTP server, SPF records, domainkeys

Recently we have setup a new SMTP server to send newsletters and promotional mails to our registered users. There are 5000 users who will receive newsletters on weekly basis. We are getting bounced ...
5
votes
1answer
409 views

DKIM and SPF for a subdomain

I manage a VPS on Linode accessed through subdomain.example.com and I need to send email from this subdomain. I can't set any TXT records in Linode DNS manager because the name servers for example.com ...
5
votes
3answers
7k views

How to format and where to put the SPF TXT record?

EDIT I think I more or less understand the syntax and, anyway, Google is giving, in the link below, the syntax needed. My question is really where to put that stuff. Should I quote every field? The ...
4
votes
6answers
592 views

Are SPF needed for domains that do not send mails and do not have MX record?

I have some domains registered that do not send mails. I have totally removed MX record for these domains on my DNS. Is it still useful to set an SPF record in order to avoid spammer to send mails ...
4
votes
1answer
148 views

SPF records issue

I have an SPF record set up for my domain eg: v=spf1 a mx include:mydomain.co.uk ?all However, I now have to add an SPF record for a web based invoicing system which wants me to add the following ...
4
votes
3answers
3k views

Why is my email failing Gmail's DKIM test?

I have a message that was rejected by Gmail, I don't know why. It passes SPF. We aren't using DKIM. Do I need to set up DKIM? I am in control of "example.com". Our mail server is "server.example.com" ...
4
votes
3answers
380 views

With valid SPF my mail header becomes huge -> high spamassasin score

I have a dedicated server with a survey system running on a subdomain. The parent domain is hosted on another server. I send email via google apps. Reverse DNS is correct. Without SPF og DKIM, the ...
4
votes
2answers
588 views

What's the difference between mx: and include: in SPF records?

I'm very new to all things DNS, yet I am trying to set up some SPF records. So far the SPF Setup Wizard has been immensely helpful, and I think I have things pretty much set; however I'd really like ...
4
votes
2answers
2k views

Remove “via” from emails sent to Gmail from Amazon SES

When sending emails from Amazon SES, gmail shows "sent via amazonses.com". How do I remove this? According to Google, I'm a sender and I don't want my recipients to see the "via" link. What can I ...
4
votes
4answers
2k views

Do I need SPF, and how do I set it up?

I've read that SPF is a way to ensure that spam sent in my name is evidently fake, and I'd like to use that. How do I set up SPF? Or is it already in effect? I have two domains hosted on ...
4
votes
3answers
89 views

Will mailing lists “break” if SPF is too restrictive?

I have recently configured my own mail server (Linux-based postfix + dovecot scenario). This is just for personal use - I have no bulk mail going out, no automatically generated mail outbound from the ...
4
votes
1answer
58 views

Can the dns' domain be in its own spf record?

I'm finally fixing up my dns zone files in Gandi, which has a handy feature that lets me use the same zone file for several domains. So I can keep 1 zone file for a single domain and all its tld's. ...
4
votes
1answer
888 views

Setting SPF record on Amazon Route 53 with cli53 tool

My domain is already with Amazon Route 53 and I can use the cli53 command line tool quite happily to maintain it. We are moving to use Amazon SES and I would like to add an SPF record to the domain, ...
4
votes
2answers
185 views

SPF Record with or without plus

Is there any difference between v=spf1 +a +mx -all and v=spf1 a mx -all I am unsure if they do the same thing or somthing different. Clarification would be great. Thank you
4
votes
2answers
155 views

Email Server Validation Website

When sending emails I want my server to have DomainKeys and SPF records setup records correctly, is there a website I can email that does validation of my DomainKeys and SPF records?
4
votes
3answers
1k views

How to reject/detect emails claiming to be from my own domain?

We have following e-mail topology: Exchange server --------- Sendmail server ---------------Internet On sendmail server there is no any user mailbox and messages with sender address ...
4
votes
3answers
156 views

TXT record for a server behind a router?

I've found this wonderful explanation of SPF on http://www.openspf.org/SPF_Record_Syntax and i had it working on my older setup. Setup has changed and i find myself in the ropes again. I have an ...
3
votes
1answer
397 views

How did this email bypass my SPF settings?

I received a phishing email this morning that appeared to come from one of my addresses to itself. Looking at the headers, I found something interesting. DomainKey-Status: no signature ...
3
votes
5answers
707 views

SAN typical MTBF

We're using a SAN on a project at work, and there's a bit of debate around the fact that's technically it's a Single Point of Failure. No one seems to have any hard data. The SAN in question is a ...