SPF
From DreamHost
Contents |
SPF (Sender Policy Framework)
Background Information
SPF, or Sender Policy Framework (aka Sender ID), fights return-path address forgery and makes it easier to identify spoofed e-mails. This is because domain owners identify all mail servers that send e-mail on their behalf within their DNS entries. Mail servers that receive SMTP e-mail verify the envelope sender address against the information in DNS, and thus can distinguish between authentic messages and forgeries before any message data is transmitted.
Adding SPF Information Manually
SPF uses text, or TXT, DNS records to provide information. It's possible to add these records manually from the DreamHost Control Panel.
- Visit the Manage Domains page in Control Panel, and click the "[DNS]" link for the domain you wish to edit. You'll be taken to the domain management page.
- In the "Add a new DNS record..." box, verify that the correct domain appears -- keep in mind that SPF treats subdomains (such as sub.example.com) as separate (see FAQ).
- Paste the following SPF command in the "Value:" text box. Add a comment if you wish. Note the IP address of your webserver or other dreamhost machines may not be covered which could cause problems if you send mail directly from those machines.
v=spf1 ip4:208.97.132.0/24 ip4:66.33.201.0/24 ip4:64.111.100.0/24 ip4:66.33.216.0/24 ip4:208.113.200.0/24 ip4:208.97.187.0/24 mx ~all
- From the "Type:" pulldown, choose "TXT"
- Click the "Add Record Now!" button.
Third Party SPF Records
Many Dreamhosters use third party mail systems including outsourcing their mail to Google Apps or using mass-mailing systems like Mailchimp to send newsletters. In these cases it is important to adjust your SPF record appropriately or you can experience lost emails. Here are a few links to resources to help you create a more robust SPF record.
- Gmail - How do I set my SPF records?
- Mailchimp - SenderID Authentication For Your MailChimp Campaigns
- Campaign Monitor - What is email authentication (SPF, Sender ID and DomainKeys) and how do I set it up?
- Constant Contact - How do I self-authenticate via senderID and allow Constant Contact to send on behalf of my company domain?
Related Sites
- http://www.openspf.org/: Sender Policy Framwork site
- http://www.openspf.org/faq.html: SPF FAQ

