Difference between revisions of "SPF"

From Freephile Wiki
Jump to navigation Jump to search
m
m (added Category:Spam using HotCat)
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
We recommend that you create a Sender Policy Framework (SPF) record for your domain. An SPF record is a type of [[DNS]] record that identifies which mail servers are permitted to send email on behalf of your domain.
+
We recommend that you create a Sender Policy Framework (SPF) record for your domain. An SPF record is a type of DNS record that identifies which mail servers are permitted to send email on behalf of your domain.
  
 
The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. Recipients can refer to the SPF record to determine whether a message purporting to be from your domain comes from an authorized mail server.
 
The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. Recipients can refer to the SPF record to determine whether a message purporting to be from your domain comes from an authorized mail server.
Line 7: Line 7:
  
 
If you just want to use the MX records and A records to control who is valid, then <code>"v=spf1 mx a -all"</code> is the text record that works.  This [http://www.spfwizard.net/ wizard] can help.  Once you're done, you can check on things with  
 
If you just want to use the MX records and A records to control who is valid, then <code>"v=spf1 mx a -all"</code> is the text record that works.  This [http://www.spfwizard.net/ wizard] can help.  Once you're done, you can check on things with  
 
+
<code>nslookup -query=mx</code>
; Check the MX (Mail Exchanger) records for example.com
 
<code>nslookup -query=mx example.com</code>
 
; Check records for example.com using Google's nameserver
 
<code>nslookup example.com 8.8.8.8</code>
 
; Check text records (including SPF) for example.com
 
<code>nslookup -type=txt example.com</code>
 
  
 
== Resources ==
 
== Resources ==

Revision as of 15:24, 14 February 2016

We recommend that you create a Sender Policy Framework (SPF) record for your domain. An SPF record is a type of DNS record that identifies which mail servers are permitted to send email on behalf of your domain.

The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. Recipients can refer to the SPF record to determine whether a message purporting to be from your domain comes from an authorized mail server.

Ours looks like this:
v=spf1 mx a include:registrar-servers.com include:_spf.google.com ~all

If you just want to use the MX records and A records to control who is valid, then "v=spf1 mx a -all" is the text record that works. This wizard can help. Once you're done, you can check on things with nslookup -query=mx

Resources[edit | edit source]

  1. Configure SPF records to work with Google Apps (Google)
  2. How to use an SPF record to prevent spoofing and improve email reliabiltiy (Digital Ocean)