Questions tagged [spf]

Sender Policy Framework (SPF) record is a type of DNS record used to specify which IP addresses and hosts are authorized to send mail for a domain. SPF records are always TXT records.

Filter by
Sorted by
Tagged with
1
vote
0answers
45 views

Which IP address does SPF validate?

Should SPF validate the SMTP server address or the home PC address? I have a situation where a home PC is sending mail through the ISP's SMTP server. The email address has a personal domain, used only ...
0
votes
0answers
20 views

Some emails sent out of our ERP are not being received

A few of our customers have been reporting not receiving some of the emails sent from our ERP (NetSuite) and they are not even in their spam folder. It shows correctly being sent on our side. We have ...
1
vote
1answer
39 views

Email: Protect spoofing from other users on same domain?

SPF and DKIM help to validate that an email was sent from the domain it claims to have been sent from. But what if a coworker spoofs another mailbox on the same domain, i.e. spoofing an email as ...
0
votes
1answer
46 views

How does SPF protect against email spoofing in case of a spoofer claiming the mail was relayed to him from a third party?

SPF records whitelist legitimate mailservers in the DNS record. Incoming mail servers reject mails whose outgoing mailserver is not on the whitelist. But what is preventing a spoofer from creating a ...
3
votes
1answer
1k views

Google MX check bogus error? Every name server must reply with exactly the same TXT records

was using this tool, https://toolbox.googleapps.com/apps/checkmx/, to check my domain and it reports this error: Every name server must reply with exactly the same TXT records. my domain has ...
0
votes
1answer
33 views

How is connected Envelop From and Mail From mail header?

I was looking into mail header of a newsletter message sent by my company. I cannot understand how an external server (newsletter provider) can send message with them as envelop from but with my ...
1
vote
1answer
2k views

SPF type ptr discouraged? Then what should I use?

I'm trying to setup a mail server and then on mxtoolbox.com I was told: Your domain's SPF record includes a sender mechanism type of PTR. The use of this mechanism is heavily discouraged per ...
0
votes
1answer
24 views

SPF record & E-mail Autoresponse issue

Sending out mail passes SPF and e-mail comes from x.x.x.207. However, if an out of office message is setup (Outlook client, 2016), the autoresponse then fails SPF and comes from x.x.x.213 instead with ...
-1
votes
1answer
29 views

What is SPF error, and how do I resolve it?

I am the admin for a business account hosted on gmail and my users are complaining that they cannot send emails to a particular address. The emails always bounce. However, sending an email to any ...
0
votes
1answer
423 views

Gmail softbounced forwarded messages with DMARC

-2 I have a system with spam/virus scanner (EFA) in front of a mailserver. On the mailserver mails coming from a sender with DMARC and forwarded to external emails like Gmail do Softbounce. I ...
2
votes
1answer
21 views

Is this how I indicate that only my MX IP is authorized to send email for this domain?

I would have a TXT record as such: v=spf1 mx -all which translates as "only my MX IP is authorized to send email for this domain"? NOTE: I don't want A records to be able to do so, since my web ...
0
votes
2answers
101 views

SPF - that is just limiting what IPs are allowed to relay?

Am I missing something, or is SPF simply a way to say "only clients on the following networks are allowed to send email through this server"? Which - for a Comcast or someone who owns the IPs for all ...
2
votes
1answer
68 views

If “a:domain.com” is used, would it include emails sent from *@subdomain.domain.com address?

Supposedly I have example.com domain and would like it to allow mails sent from subdomain.domain.com. If the spf record should verify emails sent from *@subdomain.domain.com address (or mailed-by: ...
1
vote
1answer
782 views

Why my emails go to junk folder?

I registered a new .xyz domain name a few days ago. The domain name was never registered by others before. I set up a postfix server on a clean ip(checked its reputation). I set up SPF, DKIM, and ...
1
vote
1answer
85 views

Emails delivered to spam despite spf/dkim/dmark correct

I'm having an issue with the system-generated emails from my web server being delivered to spam folder or filtered out completely by spam filters. I am referring, for example, to a registration email ...
0
votes
1answer
181 views

freebsd postfix python policyd-spf ip addres validation error

I recently encountered a problem on my freebsd postfix mail server with the packet py27-postfix-policyd-spf-python-1.3.2_1 My maillogs where full with the following messages: policyd-spf[16637]: ...
1
vote
0answers
42 views

DNS, verify domain DKIM

I have 3 domains: example.com, example2.com and s1.example.com These 3 domains have their own servers When I sending mails any of them DKIM, SPF and DMARC are PASS but when I send mail form s1....
0
votes
0answers
143 views

In DMARC report other IPs than mine fail check, but disposition is always “none”

I have trouble to understand the DMARC reports I receive. In all reports, I get some IPs that are not mine sending a couple of emails, fine, their checks (SPF or DKIM) always fail, but still the ...
0
votes
1answer
48 views

Is there any technical limitation while working with SPF record?

Can I add more than one data center's IP subnet to my existing SPF records or is there some limitation with SPF in any case? below is the sample SPF, this is not correct when you verify but this is ...
2
votes
2answers
1k views

How to configure a long SPF record for UDP?

I have an SPF TXT DNS record that's too long to be served via UDP. It validates over TCP, but that's not as performant as UDP. I know that TXT records can be broken into multiple lines. How should ...
2
votes
3answers
2k views

What does a “-all” do in an included (secondary) SPF record?

In an SPF record, the -all option means “I am whitelisting just the machines/domains I am explicitly listing here, and no other servers can originate email for this domain.” So what does it mean when ...
0
votes
0answers
198 views

Emails being spoofed? Constantly blacklisted

Please point me in the right direction if this isn't the best place to ask this but I manage a linux based (centos) server using Plesk. We were subject to a spam attack a couple of months ago where ...
1
vote
1answer
372 views

Why SPF checks seem to be useless?

I set an SPF record for a domain, however spoofing the sender still works, the reason is quite simple: It seems that there are 3 various "from" in e-mail: Reply to Return path Envelope from See ...
2
votes
0answers
2k views

Is it possible to have Outlook 2013/2010 display an SPF warning?

I have recently setup SPF and DKIM on my mail server. This works as expected, and during testing when sending emails to my gmail account, Gmail displays a warning if the addresses don't match or the ...
0
votes
1answer
352 views

My SPF record is apparently stopping a mail relayer forwarding my message

I have recently set up my own mail server on my VPS (CentOS, postfix and dovecot, though I don't believe any of that is relevant). I have protected it with this SPF record v=spf1 mx a ip4:xx.xx.xx....
0
votes
2answers
720 views

Google Apps Mail & Remote webserver: Email goes to spam even with DKIM & SPF

I believe my situation is extremely common. I have a site with the following setup. Registrar is Network Solutions. The DNS points to the webserver on Host Gator and the Email hosted on Google apps. ...
0
votes
0answers
114 views

Google Apps - Unable to receive emails on same domain despite SPF and DKIM confirmed

We're developing a site that will be sending emails from noreply@domain.com (this email account doesn't exist) to name@domain.com. domain.com has emails served via Google Apps; the MX, SPF and DKIM ...
2
votes
1answer
2k views

SPF and Reply-To header

I found that SPF record are checked according to From sender's domain. Is this supposed to be used also for Reply-To header or may I put in the Reply-To address what I want?
1
vote
1answer
241 views

Working with spf record on self hosted domain

I am attempting to create my spf record. Here is my scenario: virtual machine running Zimbra which is hosting domain1.com as the primary url has a public ip address (for example 123.123.123.123) ...
0
votes
2answers
58 views

How do I set up SPF to block one domain but not others?

Elo all, I have a google apps account that runs on an old domain name - example.old - that is no longer used. I don't want anything to be able to send from example.old any more. Primarily its the old ...
7
votes
4answers
21k views

Make postfix reject incoming email spoofed as from my own domain

I have a postfix server correctly configured to allow incoming mail to my domain, and to require authentication in order to send mail to any other network. A lot of spam that I get has a forged "from"...
0
votes
1answer
93 views

Run small mail server using a second domain instead of dynamic ip hostname service

How do I use a second domain instead of freely registered hostname, assigned to a dynamic ip address, in place of email address domain? something like contact@exemplo.com.br instead of contact@...
0
votes
0answers
327 views

Softfail with properly configured SPF

I have just set up a mailserver with postfix+dovecot. Sometimes, when I send an email, I get an SPF softfail (the other times, the test passes). It seems postfix isn't communicating the IP address ...
5
votes
2answers
1k views

Sending mails from Outlook: SPF fails

In our Server we've implemented SPF and opendkim. The IP of our server is 85.214.95.200. SPF and opendkim verification works as expected. The problem is with one of our users. I don't know the ...
2
votes
1answer
3k views

Sender Policy Framework when using Smart Host

The reading I have done on SPF is terribly confusing, and the SPF examples I have seen use IP addresses and not domain names. I would like to know how to create an SPF record with domain names (not IP ...