SPF (Sender Policy Framework), not set for all email senders.

We're receiving lots of forged emails, the sender claims it sends from mail.abc.com, but it's not actually from the permitted IP. I think to block this type of spam, checking SPF is must. However, there still seems to be many email servers who don't have SPF record set for their mail server.

How do you guys taking advantage of SPF while minimizing false positive?
LVL 1
crcsupportAsked:
Who is Participating?
 
Simon Butler (Sembee)Connect With a Mentor ConsultantCommented:
There is the problem with SPF records - until the majority of domains use it, the tool has limited use. You will need to configure whatever tool you are using for blocking email via SPF records to be very conservative - reporting only in some cases, scoring only in others. Not only are SPF records not in widespread use, they aren't always configured correctly.

Simon.
0
 
AmitConnect With a Mentor IT ArchitectCommented:
I use software like Mail Marshal tool and block's the spam emails.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.