SPF
From DreamHost
Contents |
[edit] SPF (Sender Policy Framework)
[edit] Background Information
SPF, or Sender Policy Framework (aka Sender ID), fights return-path address forgery and makes it easier to identify spoofed e-mails. This is because domain owners identify all mail servers that send e-mail on their behalf within their DNS entries. Mail servers that receive SMTP e-mail verify the envelope sender address against the information in DNS, and thus can distinguish between authentic messages and forgeries before any message data is transmitted.
[edit] Adding SPF Information Manually
SPF uses text, or TXT, DNS records to provide information. It's possible to add these records manually from the DreamHost Control Panel.
- Visit the Manage Domains page in Control Panel, and click the "[DNS]" link for the domain you wish to edit. You'll be taken to the domain management page.
- In the "Add a new DNS record..." box, verify that the correct domain appears -- keep in mind that SPF treats subdomains (such as sub.example.com) as separate (see FAQ).
- Paste the following SPF command in the "Value:" text box. Add a comment if you wish.
v=spf1 ip4:208.97.132.0/24 ip4:66.33.201.0/24 ip4:64.111.100.0/24 ip4:66.33.216.0/24 ip4:208.113.200.0/24 ip4:208.97.187.0/24 mx ~all
- From the "Type:" pulldown, choose "TXT"
- Click the "Add Record Now!" button.
[edit] Third Party SPF Records
Many Dreamhosters use third party mail systems including outsourcing their mail to Google Apps or using mass-mailing systems like Mailchimp to send newsletters. In these cases it is important to adjust your SPF record appropriately or you can experience lost emails. Here are a few links to resources to help you create a more robust SPF record.
- Gmail - How do I set my SPF records?
- Mailchimp - SenderID Authentication For Your MailChimp Campaigns
- Campaign Monitor - What is email authentication (SPF, Sender ID and DomainKeys) and how do I set it up?
- Constant Contact - How do I self-authenticate via senderID and allow Constant Contact to send on behalf of my company domain?
[edit] Related Sites
- http://www.openspf.org/: Sender Policy Framwork site
- http://www.openspf.org/faq.html: SPF FAQ

