Difference between revisions of "SPF"

From Freephile Wiki
Jump to navigation Jump to search
m
 
(One intermediate revision by the same user not shown)
Line 7: Line 7:
  
 
If you just want to use the MX records and A records to control who is valid, then <code>"v=spf1 mx a -all"</code> is the text record that works.  This [http://www.spfwizard.net/ wizard] can help.  Once you're done, you can check on things with  
 
If you just want to use the MX records and A records to control who is valid, then <code>"v=spf1 mx a -all"</code> is the text record that works.  This [http://www.spfwizard.net/ wizard] can help.  Once you're done, you can check on things with  
<code>nslookup -query=mx</code> or <code>nslookup domain 8.8.8.8</code>
+
 
 +
; Check the MX (Mail Exchanger) records for example.com
 +
<code>nslookup -query=mx example.com</code>  
 +
; Check records for example.com using Google's nameserver
 +
<code>nslookup example.com 8.8.8.8</code>
 +
; Check text records (including SPF) for example.com
 +
<code>nslookup -type=txt example.com</code>
  
 
== Resources ==
 
== Resources ==

Latest revision as of 13:26, 2 February 2017

We recommend that you create a Sender Policy Framework (SPF) record for your domain. An SPF record is a type of DNS record that identifies which mail servers are permitted to send email on behalf of your domain.

The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. Recipients can refer to the SPF record to determine whether a message purporting to be from your domain comes from an authorized mail server.

Ours looks like this:
v=spf1 mx a include:registrar-servers.com include:_spf.google.com ~all

If you just want to use the MX records and A records to control who is valid, then "v=spf1 mx a -all" is the text record that works. This wizard can help. Once you're done, you can check on things with

Check the MX (Mail Exchanger) records for example.com

nslookup -query=mx example.com

Check records for example.com using Google's nameserver

nslookup example.com 8.8.8.8

Check text records (including SPF) for example.com

nslookup -type=txt example.com

Resources[edit | edit source]

  1. Configure SPF records to work with Google Apps (Google)
  2. How to use an SPF record to prevent spoofing and improve email reliabiltiy (Digital Ocean)