I'm using Google Apps for my domains email, and have the Google suggested SPF set:

"v=spf1 include:_spf.google.com ~all"

This works as expected. In certain cases though, my web app sends emails to users (exim4) also. The problem I'm having is that when the server sends emails, the SPF soft fails:

Received-SPF: softfail (google.com: domain of transitioning xxx@xxx.com does not designate as permitted sender) client-ip=;

I'm confused how I enhance my above SPF to permit my domains IP to send emails also. I'm not sure if I need to add to the above SPF, or create a second one.

Any help would be appreciated, Thanks


Your current record authorizes Google servers. The ~all tells SPF systems that servers not explicitly authorized should softfail.

You can either modify the SPF record so that it includes the IP addresses of your web app, or replace the ~all part with ?all (not recommended)

I think it would look something like:

v=spf1 ip4: include:_spf.google.com ~all

However you can probably find a web page which can help you figure it out yourself: for example, there is http://old.openspf.org/wizard.html

  • It should be ip4: but otherwise that's right – DerfK Jan 27 '11 at 6:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.