Questions tagged [spf]

Sender Policy Framework (SPF) record is a type of DNS record used to specify which IP addresses and hosts are authorized to send mail for a domain. SPF records are always TXT records.

Filter by
Sorted by
Tagged with
1 vote
0 answers
19 views

Webmin Emails In Trash SPF=none & DKIM=permerror

I have webmin installed on my server, along with virtualmin. While Virtualmin emails are correctly authenticated with configured SPF and DKIM settings.... All of my emails from webmin and/or root ...
user avatar
  • 195
0 votes
0 answers
48 views

How to send dkim/spf compliant email from Debian 11?

I don't need to create a full blown email implementation. I don't need to receive emails from anybody. I just want to be able to to send emails from no-reply@example.com for password resets, email ...
user avatar
0 votes
1 answer
42 views

What additional protection does DMARC provide when using SPF?

I am evaluating this report of a vulnerability on my website: I just checked for DMARC records and DMARC policy for XXXXXX domain and there are none. Effectively allowing for spam to originate from ...
user avatar
0 votes
1 answer
44 views

What is the recommended way to process buggy SPF (DNS TXT) records?

Given an SPF record with one or more invalid entries. Eg: v=spf1 ip4:1.2.3.4/24 ip6:fe80:0::/64 fe80:1::/64 mx ~all As you can see there is an invalid entry (missing ip6: mechanism) following 2 valid ...
user avatar
  • 135
1 vote
0 answers
158 views

Which IP address does SPF validate?

Should SPF validate the SMTP server address or the home PC address? I have a situation where a home PC is sending mail through the ISP's SMTP server. The email address has a personal domain, used only ...
user avatar
0 votes
1 answer
136 views

Some emails sent out of our ERP are not being received

A few of our customers have been reporting not receiving some of the emails sent from our ERP (NetSuite) and they are not even in their spam folder. It shows correctly being sent on our side. We have ...
user avatar
  • 103
1 vote
1 answer
45 views

Email: Protect spoofing from other users on same domain?

SPF and DKIM help to validate that an email was sent from the domain it claims to have been sent from. But what if a coworker spoofs another mailbox on the same domain, i.e. spoofing an email as ...
user avatar
  • 113
0 votes
1 answer
54 views

How does SPF protect against email spoofing in case of a spoofer claiming the mail was relayed to him from a third party?

SPF records whitelist legitimate mailservers in the DNS record. Incoming mail servers reject mails whose outgoing mailserver is not on the whitelist. But what is preventing a spoofer from creating a ...
user avatar
  • 137
4 votes
1 answer
3k views

Google MX check bogus error? Every name server must reply with exactly the same TXT records

was using this tool, https://toolbox.googleapps.com/apps/checkmx/, to check my domain and it reports this error: Every name server must reply with exactly the same TXT records. my domain has ...
user avatar
  • 41
0 votes
1 answer
38 views

How is connected Envelop From and Mail From mail header?

I was looking into mail header of a newsletter message sent by my company. I cannot understand how an external server (newsletter provider) can send message with them as envelop from but with my ...
user avatar
  • 2,164
3 votes
1 answer
3k views

SPF type ptr discouraged? Then what should I use?

I'm trying to setup a mail server and then on mxtoolbox.com I was told: Your domain's SPF record includes a sender mechanism type of PTR. The use of this mechanism is heavily discouraged per ...
user avatar
0 votes
1 answer
34 views

SPF record & E-mail Autoresponse issue

Sending out mail passes SPF and e-mail comes from x.x.x.207. However, if an out of office message is setup (Outlook client, 2016), the autoresponse then fails SPF and comes from x.x.x.213 instead with ...
user avatar
-1 votes
1 answer
45 views

What is SPF error, and how do I resolve it?

I am the admin for a business account hosted on gmail and my users are complaining that they cannot send emails to a particular address. The emails always bounce. However, sending an email to any ...
user avatar
0 votes
1 answer
568 views

Gmail softbounced forwarded messages with DMARC

-2 I have a system with spam/virus scanner (EFA) in front of a mailserver. On the mailserver mails coming from a sender with DMARC and forwarded to external emails like Gmail do Softbounce. I ...
user avatar
2 votes
1 answer
25 views

Is this how I indicate that only my MX IP is authorized to send email for this domain?

I would have a TXT record as such: v=spf1 mx -all which translates as "only my MX IP is authorized to send email for this domain"? NOTE: I don't want A records to be able to do so, since my web ...
user avatar
  • 133
0 votes
2 answers
245 views

SPF - that is just limiting what IPs are allowed to relay?

Am I missing something, or is SPF simply a way to say "only clients on the following networks are allowed to send email through this server"? Which - for a Comcast or someone who owns the IPs for all ...
user avatar
  • 133
2 votes
1 answer
95 views

If "a:domain.com" is used, would it include emails sent from *@subdomain.domain.com address?

Supposedly I have example.com domain and would like it to allow mails sent from subdomain.domain.com. If the spf record should verify emails sent from *@subdomain.domain.com address (or mailed-by: ...
user avatar
2 votes
1 answer
2k views

Why my emails go to junk folder?

I registered a new .xyz domain name a few days ago. The domain name was never registered by others before. I set up a postfix server on a clean ip(checked its reputation). I set up SPF, DKIM, and ...
user avatar
  • 383
1 vote
1 answer
98 views

Emails delivered to spam despite spf/dkim/dmark correct

I'm having an issue with the system-generated emails from my web server being delivered to spam folder or filtered out completely by spam filters. I am referring, for example, to a registration email ...
user avatar
  • 402
0 votes
1 answer
199 views

freebsd postfix python policyd-spf ip addres validation error

I recently encountered a problem on my freebsd postfix mail server with the packet py27-postfix-policyd-spf-python-1.3.2_1 My maillogs where full with the following messages: policyd-spf[16637]: ...
user avatar
  • 126
1 vote
0 answers
51 views

DNS, verify domain DKIM

I have 3 domains: example.com, example2.com and s1.example.com These 3 domains have their own servers When I sending mails any of them DKIM, SPF and DMARC are PASS but when I send mail form s1....
user avatar
0 votes
0 answers
183 views

In DMARC report other IPs than mine fail check, but disposition is always "none"

I have trouble to understand the DMARC reports I receive. In all reports, I get some IPs that are not mine sending a couple of emails, fine, their checks (SPF or DKIM) always fail, but still the ...
user avatar
  • 163
0 votes
1 answer
52 views

Is there any technical limitation while working with SPF record?

Can I add more than one data center's IP subnet to my existing SPF records or is there some limitation with SPF in any case? below is the sample SPF, this is not correct when you verify but this is ...
user avatar
3 votes
2 answers
3k views

How to configure a long SPF record for UDP?

I have an SPF TXT DNS record that's too long to be served via UDP. It validates over TCP, but that's not as performant as UDP. I know that TXT records can be broken into multiple lines. How should ...
user avatar
  • 201
2 votes
3 answers
2k views

What does a "-all" do in an included (secondary) SPF record?

In an SPF record, the -all option means “I am whitelisting just the machines/domains I am explicitly listing here, and no other servers can originate email for this domain.” So what does it mean when ...
user avatar
0 votes
0 answers
205 views

Emails being spoofed? Constantly blacklisted

Please point me in the right direction if this isn't the best place to ask this but I manage a linux based (centos) server using Plesk. We were subject to a spam attack a couple of months ago where ...
user avatar
1 vote
1 answer
477 views

Why SPF checks seem to be useless?

I set an SPF record for a domain, however spoofing the sender still works, the reason is quite simple: It seems that there are 3 various "from" in e-mail: Reply to Return path Envelope from See ...
user avatar
  • 2,053
2 votes
0 answers
2k views

Is it possible to have Outlook 2013/2010 display an SPF warning?

I have recently setup SPF and DKIM on my mail server. This works as expected, and during testing when sending emails to my gmail account, Gmail displays a warning if the addresses don't match or the ...
user avatar
0 votes
1 answer
401 views

My SPF record is apparently stopping a mail relayer forwarding my message

I have recently set up my own mail server on my VPS (CentOS, postfix and dovecot, though I don't believe any of that is relevant). I have protected it with this SPF record v=spf1 mx a ip4:xx.xx.xx....
user avatar
0 votes
2 answers
768 views

Google Apps Mail & Remote webserver: Email goes to spam even with DKIM & SPF

I believe my situation is extremely common. I have a site with the following setup. Registrar is Network Solutions. The DNS points to the webserver on Host Gator and the Email hosted on Google apps. ...
user avatar
0 votes
0 answers
116 views

Google Apps - Unable to receive emails on same domain despite SPF and DKIM confirmed

We're developing a site that will be sending emails from noreply@domain.com (this email account doesn't exist) to name@domain.com. domain.com has emails served via Google Apps; the MX, SPF and DKIM ...
user avatar
2 votes
1 answer
3k views

SPF and Reply-To header

I found that SPF record are checked according to From sender's domain. Is this supposed to be used also for Reply-To header or may I put in the Reply-To address what I want?
user avatar
  • 2,164
1 vote
1 answer
354 views

Working with spf record on self hosted domain

I am attempting to create my spf record. Here is my scenario: virtual machine running Zimbra which is hosting domain1.com as the primary url has a public ip address (for example 123.123.123.123) ...
user avatar
  • 213
0 votes
2 answers
64 views

How do I set up SPF to block one domain but not others?

Elo all, I have a google apps account that runs on an old domain name - example.old - that is no longer used. I don't want anything to be able to send from example.old any more. Primarily its the old ...
user avatar
9 votes
4 answers
24k views

Make postfix reject incoming email spoofed as from my own domain

I have a postfix server correctly configured to allow incoming mail to my domain, and to require authentication in order to send mail to any other network. A lot of spam that I get has a forged "from"...
user avatar
  • 603
0 votes
1 answer
133 views

Run small mail server using a second domain instead of dynamic ip hostname service

How do I use a second domain instead of freely registered hostname, assigned to a dynamic ip address, in place of email address domain? something like contact@exemplo.com.br instead of contact@...
user avatar
  • 13
5 votes
2 answers
1k views

Sending mails from Outlook: SPF fails

In our Server we've implemented SPF and opendkim. The IP of our server is 85.214.95.200. SPF and opendkim verification works as expected. The problem is with one of our users. I don't know the ...
user avatar
2 votes
1 answer
3k views

Sender Policy Framework when using Smart Host

The reading I have done on SPF is terribly confusing, and the SPF examples I have seen use IP addresses and not domain names. I would like to know how to create an SPF record with domain names (not IP ...
user avatar
  • 11.2k