Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Sender Policy Framework (SPF) is a technique to prevent e-mail sender address forgery. With SPF system administrators add information about allowed senders for particular domain in a DNS server's TXT and/or SPF record.

Please have a look at the canonical question What are SPF records and how do I configure them.

869 questions
7
votes
2 answers

Hosting DKIM records on a separate nameservers

For organization we setup a _domainkey.domain.com as a separate zone instead of creating all our DKIM records on our root domain zone domain.com. As a result the nameservers for _domainkey.domain.com and domain.com are different. Is this…
jadent
  • 175
  • 3
7
votes
3 answers

Is it valid to have SPF records for a domain that is a CNAME?

I read that it's not valid to have a CNAME for a domain that also has its own SPF, because all records are taken from the domain that the CNAME points to. However, this doesn't seem to be what happens for me. I have pi.dantup.com CNAMEd to…
Danny Tuppeny
  • 237
  • 1
  • 3
  • 9
7
votes
2 answers

Gmail ignoring SPF record

I have a domain whose SPF record looks like this: "v=spf1 mx ip4:6.7.8.9 -all". The record is valid, and to my understanding implies that allow mails only from: The server that is MX record for the domain. said ipv4 address: 6.7.8.9 Hard fail on…
0fnt
  • 274
  • 5
  • 12
7
votes
4 answers

Why does my mail get marked as spam?

I Have the server "afspraakmanager.be". It matches everything not to be a spam server.(it isn't by the way): it has reverse dns, spf,dkim,... . But hotmail marks it as spam. I think the problem is the SPF/DKIM records. when i sent an email to my…
Nick
  • 195
  • 1
  • 6
7
votes
2 answers

How to resolve SPF configuration to allow Google sending mails?

we are configuring DNS for a GMail service, the MX records are configured as to Google says, however, in the DNS check, there is a warning: SPF must allow Google to send mail on behalf of the domain My questions: Why is the SPF record for GMail a…
poseid
  • 559
  • 4
  • 10
  • 20
7
votes
2 answers

What are the correct SPF records to allow both local and Google Apps delivery

We have recently moved our server stack to a new data farm, and some of our clients are experiencing issues with mail being sent from their GApps accounts. Before the server move we had no issues, but I suspect that maybe the IP change etc might…
Byron Rode
  • 173
  • 1
  • 5
7
votes
2 answers

GMail suspects confirmation email in stealing personal information

When user registers on my web site, web site sends user email confirmation link. Subject: Please confirm your email address Body:Please open this link in your browser to confirm your email…
Dennis Gorelik
  • 331
  • 2
  • 8
7
votes
5 answers

Email sent from server with rDNS & SPF being blocked by Hotmail

I have been unable to send email to users on hotmail or other Microsoft email servers for some time. Its been a major headache trying to find out why and how to fix the issue. The emails being sent that are blocked from my domain canadaka.net. I use…
Canadaka
  • 361
  • 1
  • 3
  • 10
7
votes
2 answers

Google Apps, SPF, softfail problem (validates with validation tools, but still softfails otherwise)

I guess this is probably a commonly asked and boring question but I'm really at a loss and I don't know what else to do. This might be a duplicate of other questions, but none of the solutions worked for me. I've Googled around and read just about…
mqchen
  • 173
  • 1
  • 5
7
votes
3 answers

Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail

Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail. When I "View Original Message" in GMail, I see... SPF: NEUTRAL with IP 173.203.187.81 DMARC: 'FAIL' ... where 173.203.187.81…
clayRay
  • 181
  • 8
6
votes
2 answers

Postfix: How to accept email with valid SPF but unresolvable hostname?

I have configured my Postfix to reject email sent from hosts without PTR record and hostnames that don't have A record. I found there are legitimate mail servers with valid SPF records which don't have A record for their hostname. As a result the…
LinuxBabe
  • 985
  • 6
  • 9
6
votes
1 answer

Is GMAIL incorrectly failing SPF?

0365 mail users are encouraged to use include:spf.protection.outlook.com -all in their SPF record. I have followed this guidance. My company's spf record says: v=spf1 include:spf.protection.outlook.com -all the spf.protection.outlook.com record…
OzPHB
  • 239
  • 3
  • 8
6
votes
2 answers

DMARC reporting unexpected SPF IP but DKIM still passes

I have both SPF and DKIM enabled on my domain. This domain is for a small company and we only have the one server (hMailServer if anyone thinks it's relevant). Recently I decided to enabled DMARC reporting and noticed something very peculiar about…
Fr33dan
  • 133
  • 1
  • 8
6
votes
3 answers

How to properly configure a mailing list server to be SPF friendly?

UPDATE: The SPF record I have in DNS for domain mailinglist.com: mailinglist.com. 3600 IN TXT "v=spf1 mx ptr include:gateway.com ?all" UPDATE2: The From:, Reply-To:, Sender: and Return-Path:headers from a failed message: ... From: "bob"…
Server Fault
  • 3,714
  • 12
  • 54
  • 89
6
votes
3 answers

Migrating Email Providers; Are Multiple DKIM Records Viable During Transition?

I am currently gathering requirements for a small (hopefully) project of migrating from SendGrid to Mandrill as a transactional email service provider. We have been using SendGrid for close to 3-4 years now and average about 5k-10k emails per day.…
Wilhelm Murdoch
  • 173
  • 1
  • 6
1 2 3
…
57 58