Server Fault
Server Fault

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Sender Policy Framework (SPF) is a technique to prevent e-mail sender address forgery. With SPF system administrators add information about allowed senders for particular domain in a DNS server's TXT and/or SPF record.

Please have a look at the canonical question What are SPF records and how do I configure them.

918 questions
266
votes
3 answers

How to include multiple domains in an spf TXT Record

I am looking to setup a TXT spf record that has 2 included domains... individually: v=spf1 include:_spf.google.com ~all and v=spf1 include:otherdomain.com ~all What is the proper way of combining them into a single item?
tgriesser
  • 3,052
111
votes
6 answers

Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

This is a Canonical Question about Fighting Spam. Also related: How to stop people from using my domain to send spam? What are SPF records, and how do I configure them? There are so many techniques and so much to know about fighting SPAM.…
Chris S
  • 78,455
96
votes
3 answers

Multiple TXT fields for same subdomain

I would like to understand if multiple TXT records for the same subdomain are ok or could lead to issues. In particular, we have the requirement for one SPF record and one Google Domain Verification record on the root domain. In AWS Route 53 they…
chrisvdb
  • 1,389
87
votes
6 answers

Do SPF Records For Primary Domain apply to subdomains?

I have a quick question regarding SPF records: Do they need to be present for all subdomains? Lets say that I have a TXT record with SPF info for domain.com Let's also say that I have a seperate email domain for subdomain.domain.com Will the SPF…
Mike B
  • 12,304
64
votes
4 answers

How to specify multiple included domains in SPF record?

Our business email is hosted on Google apps. In addition, our web server may also send email. Currently our SPF record in DNS looks like this: domain.com. IN TXT "v=spf1 a include:_spf.google.com -all" This is all fine, however now we've…
Aleks G
  • 1,036
  • 2
  • 10
  • 22
61
votes
2 answers

What are SPF records, and how do I configure them?

This is a canonical question about setting up SPF records. I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer connects to our mail server via IMAP using outlook.…
vulgarbulgar
  • 769
44
votes
7 answers

Is it becoming impossible to be a small mail provider?

I operate a small mail server for my private emails, some friends who have websites and two NGOs. In total my server sends between 60 and 400 messages a day. Now a lot of these emails are personal mails, between two or more people who know each…
Stefan Seidel
  • 742
41
votes
6 answers

Are SPF records legacy?

I am responsible for a domain which has an SPF record as recommended by various other services that send mail on this domain's behalf. When setting up Mailchimp, I was surprised to find no documentation on Mailchimp's recommended SPF setup. When I…
RomanSt
  • 1,237
38
votes
4 answers

Is using SOFTFAIL over FAIL in the SPF record considered best practice?

Or put another way, is using v=spf1 a mx ~all recommended over using v=spf1 a mx -all? The RFC does not appear to make any recommendations. My preference has always been to use FAIL, which causes problems to become apparent immediately. I find that…
Michael Kropat
  • 889
36
votes
3 answers

Remove "via" from emails sent to Gmail from Amazon SES

When sending emails from Amazon SES, gmail shows "sent via amazonses.com". How do I remove this? According to Google, I'm a sender and I don't want my recipients to see the "via" link. What can I do? Gmail checks whether emails are correctly…
csi
  • 1,605
  • 7
  • 26
  • 43
29
votes
2 answers

Is the 10-DNS-lookup limit in the SPF spec typically enforced?

My understanding is that the SPF spec specifies an email receiver shouldn't have to do more than 10 DNS lookups in order to gather all the allowed IPs for a sender. So if an SPF record has include:foo.com include:bar.com include:baz.com and those…
John Bachir
  • 2,394
28
votes
4 answers

Best Practices for preventing you from looking like a spammer

I'd like to feel more confident setting up mail for my clients with regards to false positives. Here's what I know: SPF records are good, but not every spam filter service/software (SFSS) uses them. reverse DNS (PTR) records are pretty much a…
gravyface
  • 13,987
27
votes
3 answers

Is there a way to align SPF for Google Apps alias domain?

I use Google Apps for Work. Let's say I have: primarydomain.com And another alias domain: aliasdomain.com As long as I send emails from primary domain both SPF and DKIM result perfectly aligned. However, when I send emails from alias domain SPF…
Bubba Yakoza
  • 395
  • 1
  • 3
  • 5
26
votes
1 answer

Multiple SPF records for multiple domains

We have recently started using Office 365 for our email, which requires us to add a DNS TXT record with the value v=spf1 include:spf.protection.outlook.com -all. We already have an SPF record with the value v=spf1 include:spf.mandrillapp.com ?all…
Swisher Sweet
  • 627
26
votes
3 answers

SPF vs. DKIM - The exact use cases and differences

I'm sorry for the vague title. I don't fully understand why SPF and DKIM should be used together. First: SPF can pass where it should fail if the sender or DNS is "spoofed" and it can fail where it should pass if some advanced setup of proxies and…
deleted user 42
  • 363
1
2 3
…
61 62