Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Sender Policy Framework (SPF) is a technique to prevent e-mail sender address forgery. With SPF system administrators add information about allowed senders for particular domain in a DNS server's TXT and/or SPF record.

Please have a look at the canonical question What are SPF records and how do I configure them.

869 questions
0
votes
0 answers

issue with SPF records for website hosted on GCP

I am new to GCP. I have bought a domain from GoDaddy and hosted my website on GCP. My website is built on WordPress. I have contact forms on WordPress and when customer visit my website and leave a message and their emails beside right design I ado…
Ahmed Xuberi
  • 1
  • 1
0
votes
0 answers

Allowing Messages from IP Address DMARC

I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The messages leave the network and come back in, but…
RLBChrisBriant
  • 595
  • 1
  • 7
  • 22
0
votes
1 answer

Is everything OK based on this DMARC report?

Do I understand it correct that everything is OK and I have both SPF and DKIM configured correctly based on this report from Google? google.com …
IvanD
  • 103
  • 2
0
votes
2 answers

Is possible to use keywords a, mx and include together in SPF?

Is it possible to use them in the same SPF record? For example: Value TXT: v=spf1 mx a ptr ip4:46.16.60.0/23 a:cdmon.com mx:mail.solarmora.com include:srv.cat ~all
NeDark
  • 463
  • 1
  • 6
  • 10
0
votes
2 answers

Purpose of a and include keywords in SPF

In tutorial I found this example record for SPF, but the a and include keywords wasn't explained. I don't find accurate information about them in the internet. v=spf1 mx a ptr ip4:46.16.60.0/23 a:cdmon.com include:srv.cat ~all
NeDark
  • 463
  • 1
  • 6
  • 10
0
votes
1 answer

SPF and OpenDMARC not working in Postfix

I am working on implementing SPF and OpenDMARC/DKIM to my mail servers. Currently I have two mail servers in different subnets, each with separate DNS server and domain name. They can exchange emails successfully. I set up SPF with pypolicyd-spf,…
MArhEV
  • 19
  • 6
0
votes
1 answer

SPF SOFTFAIL domain of transitioning XX@company.com does not designate X.X.X.X as permitted sender)

in my company I have the following error. softfail (google.com: domain of transitioning someone@company.com does not designate X.X.X.X as permitted sender) client-ip=X.X.X.X; Let's say my mail.company.com server is Y.Y.Y.Y, every user connects to…
Sz3jdii
  • 133
  • 1
  • 6
0
votes
2 answers

Email protected with SPF but received valid signature from other IP anyway

I've received an email in spam from info@mydomain.com to info@mydomain.com, but the "sent by" came from rec15.appleandrdoidmail.mx. info@mydomain.com is an alias. Weird thing is that it says is signed by mydomain.com! I've been looking at the email…
Miquel
  • 103
  • 5
0
votes
3 answers

AWS SES requirements on custom MAIL FROM domain

According to the docs, AWS SES has some requirements on what is an allowable MAIL FROM domain: The subdomain you use for your MAIL FROM domain has to meet the following requirements: The MAIL FROM domain has to be a subdomain of the verified…
user2959071
  • 3
  • 2
0
votes
3 answers

SPF problems with sending email from website

I've been struggling to understand how to fix a particular problem with setting up SPF with different domain names. I tried searching the web, but didn't quite find what I was looking for. My problem is that all emails are currently being sent to…
moleculezz
  • 135
  • 5
0
votes
1 answer

How does Dmarc alignment protect against anything?

I am specifically referring to Dmarc SPF alignment. To get a Dmarc pass result, all it takes is that either SPF or DKIM aligns. Let us say that I am an attacker, and try to impersonate abc.com. I have not set up DKIM which means I'm going to fail…
pHeoz
  • 163
  • 7
0
votes
2 answers

Some clear instructions on writing the DMARC record

I have been under some pressure to produce the DMARC record for one of our customers. Unfortunately, they do not give me access to the domain vendor and instead repeatedly ask "What should they write in their order?". I am not a domain expert. This…
Disasterkid
  • 111
  • 3
0
votes
1 answer

SPF and DKIM for one domain on two servers

I followed this guide to setup SPF and DKIM for emails to be sent from a server for a domain. That server is the location of the actual email server for the domain. I now want to setup another server to be able to send emails from the domain via…
Kohjah Breese
  • 171
  • 2
  • 13
0
votes
2 answers

All mails to Yahoo are deferred or in spam

i have read a lot about the problems of delivering mail to yahoo.com, i have contact the tech support but the result it's always the same: from my server all mails to yahoo./aol. are deffered and when (very rare) they are not deferred they are moved…
Mattia Di Giuseppe
  • 1
  • 1
0
votes
1 answer

For SPF records do 'a' and 'mx' achieve the same result in many cases?

Example DNS Records: Type: TXT Hostname: example.com Value: returns v=spf1 a ~all Type: A Hostname: mail.example.com Value: 1.1.1.1 Type: AAAA Hostname: mail.example.com Value: 1000:1:1:1:1:1:0001 Type: MX Hostname: example.com Value:…
myNewAccount
  • 569
  • 1
  • 6
  • 19
1 2 3
…
57 58