PDA

View Full Version : SPF - Sender Policy Framework



Snowman
04-02-2005, 02:05 PM
SPF is Sender Policy Framework (http://www.spf.pobox.com/howworks.html)
SPF fights return-path address forgery and makes it easier to identify spoofs. Sender IDadds PRA checking. Read More. (http://www.spf.pobox.com/senderid.html)

Domain owners identify sending mail servers in DNS. SMTP receivers verify the envelope sender address against this information, and can distinguish authentic messages from forgeries before any message data is transmitted.

SPF WIZARD - CLICK HERE (http://www.spf.pobox.com/wizard.html)

Most domains send outbound mail through a relatively small number of servers. Domains should describe that set of servers in an SPF record in their DNS. Internet email receivers can then reject forged messages which don't come from an envelope sender domain's approved servers. This wizard helps domain owners identify all the servers which could be expected to send mail from their domain.


Adding your SPF to your DNS record
1.) Once you have created your SPF record for your site or sites login to WHM and go to the edit DNS section.
2.) Select the domain you are adding the SPF record to and click to edit it.
3.) At the Bottom of the page add the SPF record as it looks in the wizard.

For example

alpinesupport.net. IN TXT "v=spf1 a mx ptr"

would be a simple record for this site

So you would enter it like:

alpinehosting.net. 14400 IN TXT v=spf1 a mx ptr

When a mail server sends a bounce message, it uses a null MAIL FROM: <>, and a HELO address that's supposed to be its own name. SPF will still operate, but in "degraded mode" by using the HELO domain name instead. Because this wizard can't tell which name your mail server uses in its HELO command, it lists all possible names, so there may be multiple lines shown below. If you know which hostname your mail server uses in its HELO command, you should pick out the appropriate entries and ignore the rest.