Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Sender Policy Framework (SPF) is a technique to prevent e-mail sender address forgery. With SPF system administrators add information about allowed senders for particular domain in a DNS server's TXT and/or SPF record.

Please have a look at the canonical question What are SPF records and how do I configure them.

869 questions
9
votes
3 answers

Have a valid SPF record but still can spoof my email

I have set up an SPF record for my domain, but I still can spoof email-addresses for my domain using fake email services like this one: http://deadfake.com/Send.aspx The email does arrive to my gmail inbox just fine. The email does have SPF errors…
jitbit
  • 407
  • 2
  • 6
  • 18
9
votes
1 answer

What does MX in SPF mean?

I'm setting up an email server, and I'm a bit confused by SPF. Following some examples, I set my SPF record as follows... v=spf1 mx ip4:1.2.3.4 mx:mail.mydomain.com ptr:1.2.3.4 -all I follow what most of that means, but why is MX in there twice? I…
Dan Repperger
  • 101
  • 1
  • 1
  • 3
9
votes
4 answers

What exactly is a X-YMailISG header?

Finally ... our emails are being seen by Yahoo! not as junk anymore. Hurray! However I notice that the Yahoo! receiving MTA adds in a X-YMailISG header. It's very large ... 2**10 bits? Now that I've invested too large a chunk of my waking life in…
iainH
  • 301
  • 1
  • 3
  • 11
8
votes
2 answers

What's the difference between mx: and include: in SPF records?

I'm very new to all things DNS, yet I am trying to set up some SPF records. So far the SPF Setup Wizard has been immensely helpful, and I think I have things pretty much set; however I'd really like to know what the difference between mx:domain.com…
soapergem
  • 719
  • 4
  • 13
  • 29
8
votes
2 answers

DMARC failed, but SPF pass

If i sent a mail from my website (on a private server) to autoreply@dmarctest.org, i have this report : x.x.x.x 1 none
griotteau
  • 241
  • 1
  • 5
  • 9
8
votes
2 answers

Adding an SPF record for a 3rd party, but don't have one for my own domain

We have a 3rd party service sending some email on our behalf. They are using our domain name in their outgoing emails. They have requested we configure an SPF record for them. We do not currently have an SPF record defined for our own domain, which…
k1DBLITZ
  • 213
  • 2
  • 7
8
votes
1 answer

IP address is not allowed to send mail from DOMAIN

Today I heard that a customer can't send email to us. He received the following error: < #5.5.0 smtp;550 [ipaddress] is not allowed to send mail from [domain name]. Please see…
Jordy
  • 255
  • 1
  • 3
  • 8
8
votes
2 answers

Route 53 - Should I duplicate my SPF records as TXT records?

Amazon Route 53 supports both "SPF Records" and "TXT Records". Most documentation I read tells me to list my SPF Record as a TXT Record. I understand that the SPF Record is a newer standard. Is it therefore correct for me to duplicate my SPF Records…
Sean Bannister
  • 751
  • 8
  • 19
8
votes
3 answers

Will mailing lists "break" if SPF is too restrictive?

I have recently configured my own mail server (Linux-based postfix + dovecot scenario). This is just for personal use - I have no bulk mail going out, no automatically generated mail outbound from the host, nothing like that. I've gone through the…
Chris Tonkinson
  • 475
  • 2
  • 6
  • 19
8
votes
1 answer

DKIM and SPF for a subdomain

I manage a VPS on Linode accessed through subdomain.example.com and I need to send email from this subdomain. I can't set any TXT records in Linode DNS manager because the name servers for example.com are something else, not ns1.linode.com, etc. So…
hiirulainen
  • 135
  • 2
  • 2
  • 6
8
votes
2 answers

SPF: Difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all

What is the difference between v=spf1 include:_spf.google.com ~all and v=spf1 include:spf.google.com ~all (the first one is with underline character in front of the spf, the second one without)
Adri Brundel
  • 81
  • 1
  • 1
  • 2
8
votes
1 answer

Amazon SES e-mails ending in Yahoo & Hotmail Spam folders, even though SPF and SenderID and DKIM are set correctly

This is incredibly frustrating. My Amazon SES e-mails are ending in Yahoo & Hotmail Spam folders, even though my SPF, SenderID, and DKIM are setup correctly. Since this particular site requires users to confirm their e-mail addresses, I'm losing…
8
votes
3 answers

Setting an SPF record for all subdomains of my domain

Is this possible? Like a wildcard TXT record of some sort?
Belmin Fernandez
  • 10,799
  • 27
  • 84
  • 148
8
votes
5 answers

SPF - should I implement?

A request has been made by a web developer for our domain DNS records to include SPF TXT records. I found differing opinions on this out there... Any comments or insights you can offer will be highly appreciated. I know this is not an empirical…
Manca Weeks
  • 689
  • 3
  • 7
  • 11
8
votes
3 answers

Does SPF provide benefits along with DKIM+DMARC?

I have a domain I send emails from via Mailchimp and Google. I've set up DKIM for both of them and added a DMARC record too (for testing atm). I collect reports for DMARC failures and the overwhelming majority of these reports are for SPF fails. In…