Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Sender Policy Framework (SPF) is a technique to prevent e-mail sender address forgery. With SPF system administrators add information about allowed senders for particular domain in a DNS server's TXT and/or SPF record.

Please have a look at the canonical question What are SPF records and how do I configure them.

869 questions
21
votes
3 answers

Will adding a second SPF record mess up my DNS?

Will adding a second SPF record mess up my DNS, or will it be like adding an extra nameserver? (i.e. it only helps, not hurts)
Abraham Vegh
  • 1,045
  • 5
  • 17
  • 26
19
votes
3 answers

Is there a way to align SPF for Google Apps alias domain?

I use Google Apps for Work. Let's say I have: primarydomain.com And another alias domain: aliasdomain.com As long as I send emails from primary domain both SPF and DKIM result perfectly aligned. However, when I send emails from alias domain SPF…
Bubba Yakoza
  • 305
  • 2
  • 5
19
votes
2 answers

Is it OK to have multiple TXT records for a single domain containing different SPF entries?

A remote recipient domain is rejecting mail on the grounds of SPF and I think it's because the sender has SPF configured incorrectly. When I run dig, I see: [fooadm@box ~]# dig @8.8.8.8 -t TXT foosender.com ; <<>> DiG…
Mike B
  • 11,871
  • 42
  • 107
  • 168
19
votes
2 answers

SPF Record with or without plus

Is there any difference between v=spf1 +a +mx -all and v=spf1 a mx -all I am unsure if they do the same thing or somthing different. Clarification would be great. Thank you
dgibbs
  • 661
  • 2
  • 11
  • 22
19
votes
2 answers

SPF include vs redirect

What is the difference?
700 Software
  • 2,233
  • 10
  • 49
  • 77
18
votes
1 answer

How can I have an SPF record longer than 255 characters?

So, I have been under the impression that individual SPF entries had to fit in 255 chars, or use the include operator to link together multiple entries forming a chain. However, RFC 4408 3.1.3. specifically states that multiple strings must be…
gnkdl_gansklgna
  • 280
  • 2
  • 6
18
votes
3 answers

Do changes in SPF records take time to propagate?

I'm setting up SPF records for my domain, and am not getting the results that I expect. It's quite possible I'm making some sort of mistake, but first I'd like to ask: does it take time for the changes I make to SPF records to propagate?
Daniel Griscom
  • 493
  • 1
  • 4
  • 16
17
votes
2 answers

SPF fail vs. soft-fail pros and cons

Question What are the advantages and disadvantages of using Fail vs. a SoftFail in my SPF record? What I found on the topic Back in 2007, knowledgeable-seeming folks seem to have said SoftFail was just for testing and encouraged changing it to…
sondra.kinsey
  • 293
  • 1
  • 2
  • 7
17
votes
1 answer

Can SPF records contain domain name wildcards?

Part of my SPF record contains: include:google.com I'm still getting soft fail because the actual e-mail is delivered by the following Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172] Which has a completely…
deltanovember
  • 531
  • 2
  • 7
  • 13
17
votes
2 answers

DNS MX/SPF/DMARC records without actuall emails on domain

I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "fix" my error. Thing is, of course these records are…
norr
  • 273
  • 1
  • 5
16
votes
4 answers

Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record?

As a hosting provider, we send email on behalf of our clients, so we help them set up DKIM and SPF email records in their DNS to get email deliverability just right. We've been advising them to use http://mail-tester.com to test that they didn't…
Jeff Atwood
  • 13,104
  • 20
  • 75
  • 92
16
votes
1 answer

PermError SPF Permanent Error: Void lookup limit of 2 exceeded

I am trying to setup SPF on a server - mail works fine and validates according to mxtoolbox and other online checks but when I check it using http://www.kitterman.com/spf/validate.html I get an error: PermError SPF Permanent Error: Void lookup limit…
bhttoan
  • 650
  • 3
  • 15
  • 27
14
votes
1 answer

How to resolve problems with spf / softfail?

I'm having problems with Google rejecting mail because of SPF problems. I thought I had this fixed, but evidently not... The mail is being sent from a Drupal site running mimemail. A message that shows the problem looks like: Delivered-To:…
Jim Miller
  • 713
  • 2
  • 11
  • 23
13
votes
2 answers

How is this email subverting SPF checks?

I run a mail server which appears to correctly handle emails with SPF set - however I've started receiving fake emails purporting to be from a bank - with the From address set as the bank - but which definitely do not originate from the bank. The…
davidgo
  • 6,222
  • 3
  • 23
  • 41
13
votes
3 answers

How to setup a SPF record to help fight SPAM

My little developer mind never really managed to understand how to do it, so maybe you can help me. I'm using Google Apps for Domains and MyDomain as DNS external service. Edit: Tough crowd, in Google apps says: Change the SPF record to fight SPAM …
Eduardo Molteni
  • 753
  • 1
  • 8
  • 18
1
2
3
…
57 58