In addition, the point of an SPF record is as a way of verifying that mail servers are authorised to send as a specific domain.
For example, without SPF;
My server connects to your server and says, "Hi, I am responsible for microsoft.com, I have an email for joe@yourcompany, here you go" and your server accepts it.
WITH SPF;
My server connects to your server and says, "Hi, I am responsible for microsoft.com, I..." your server interrupts with "Let me just check this out; you are 10.0.0.1, Microsofts SPF record says that only 192.168.0.1 is allowed to send, Goodbye"
It is not foolproof though, you can't actively block people with no or incorrect SPF records - there just aren't enough people with correct records to start blocking.
Kieran
Main Topics
Browse All Topics





by: MattShadboltPosted on 2008-03-30 at 21:00:02ID: 21243096
An SPF record is configured in your public DNS records and is a record specific to fighting SPAM.
ki/Sender_ Policy_Fra mework
http://en.wikipedia.org/wi
Cheers,
Matt