Solved

Help understanding SPF record and modifcation

Posted on 2014-03-19
4
298 Views
Last Modified: 2014-03-20
Help understanding SPF record

Lets say my Internet domain is company.com

The zone file for company.com shows

@                       IN      TXT     "v=spf1 a mx include:abc.com include:_marketing.xyz.com ?all"

1. Does this mean that the SMTP servers at abc.com and _marketing.xyz.com are authorised to send emails for company.com?

2. If company.com authorised another 3rd party to send emails, do I just add another 'include:3rdparty.com' to the the SPF record?
0
Comment
Question by:JCTDD
  • 2
4 Comments
 
LVL 6

Assisted Solution

by:rick81
rick81 earned 100 total points
ID: 39941450
here is a nice explanation of spf

https://support.google.com/a/answer/33786?hl=en

http://en.wikipedia.org/wiki/Sender_Policy_Framework

and yes you can add another authorisation server.
0
 

Author Comment

by:JCTDD
ID: 39941474
Thanks. I came across that article recently.

What's not clear is if the SPF record implies ALL servers or just one specific server.
0
 
LVL 6

Expert Comment

by:rick81
ID: 39941475
i see it as all.  

can anyone else confirm?
0
 
LVL 25

Accepted Solution

by:
Marcus Bointon earned 400 total points
ID: 39941649
1: yes, all entries are considered, any match will result in a pass
2: yes

The SPF ending in ?all is bad - it effectively renders the SPF useless since it says that anything you've not listed is OK too, which is the same result as not having an SPF at all. You should aim for -all (though you need to be very certain about your mail sources to do that) or at least ~all.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you can connect to your internal network or can connect to your router but are not able to connect to the Internet follow these steps in order until the problem is resolved.   1. Right click on the network icon on the task bar and select "Troub…
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question