SPF Records and spoofed email

Posted on 2009-12-28
Last Modified: 2013-12-09
I recently had some email addresses in my domain spoofed.  As a result, we ended up on a couple of blacklists.  I did not have SPF records in place.

I have just added SPF records and am waiting for them to propogate through Network Solutions servers.  Once they show up, I will test for validity.

I'm hoping this will take care of my spoofing issue and then I can request to be delisted.

Should this work or is there something else I should be doing to solve my problem?

Thanks in advance for any input.
Question by:angela_obrien
    LVL 5

    Accepted Solution

    Make sure you also have reverse DNS records. Some email servers reject email if there is no reverse record for it.
    LVL 17

    Assisted Solution

    Not everybody recognises SPF records. Generally speaking, blacklisting does not happen based on the email address used... it's the IP address that gets blacklisted. Check your configuration to make sure that nobody is relaying through your system.

    Author Comment

    Thanks for the replies.  Reverse DNS is fine.  If I run a blacklist check on my public IP address, nothing shows up....if I run it by domain name, we show up on one list.  That is what led me to believe we were listed due to the spoofing issue.  

    We show up on a second list just because we are listed on the first one.  

    I've done a check on my Exchange server.  We are not an open relay and my firewall shows no odd connections that might indicate a virus on one of the workstations.

    The spoofing thing was the only reason I could think of that we would be listed for.
    LVL 17

    Expert Comment

    Could you be blacklisted because of your public IP address? In other words, has the subnet been blacklisted?

    Author Comment

    Hi Mike,
    We have had this IP address for about a year now and it wasn't listed before.  

    Author Comment

    I've requested removal from the list and the request was granted.  I've checked and rechecked everything and can't figure out why we were listed.  Again it's only one list.

    I realize that not everyone recognizes SPF but it can't hurt to have one in place.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    PREFACE The purpose of this guide is to provide information to successfully install the MS SQL client tools for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technology…
    The purpose of this Article is to provide information for a newly released variant of malware – with the assumption that many EE Members will have need of the information. According to “Computerworld”, well over one million web sites have been co…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now