Solved

Help understanding SPF record and modifcation

Posted on 2014-03-19
4
293 Views
Last Modified: 2014-03-20
Help understanding SPF record

Lets say my Internet domain is company.com

The zone file for company.com shows

@                       IN      TXT     "v=spf1 a mx include:abc.com include:_marketing.xyz.com ?all"

1. Does this mean that the SMTP servers at abc.com and _marketing.xyz.com are authorised to send emails for company.com?

2. If company.com authorised another 3rd party to send emails, do I just add another 'include:3rdparty.com' to the the SPF record?
0
Comment
Question by:JCTDD
  • 2
4 Comments
 
LVL 6

Assisted Solution

by:rick81
rick81 earned 100 total points
ID: 39941450
here is a nice explanation of spf

https://support.google.com/a/answer/33786?hl=en

http://en.wikipedia.org/wiki/Sender_Policy_Framework

and yes you can add another authorisation server.
0
 

Author Comment

by:JCTDD
ID: 39941474
Thanks. I came across that article recently.

What's not clear is if the SPF record implies ALL servers or just one specific server.
0
 
LVL 6

Expert Comment

by:rick81
ID: 39941475
i see it as all.  

can anyone else confirm?
0
 
LVL 25

Accepted Solution

by:
Marcus Bointon earned 400 total points
ID: 39941649
1: yes, all entries are considered, any match will result in a pass
2: yes

The SPF ending in ?all is bad - it effectively renders the SPF useless since it says that anything you've not listed is OK too, which is the same result as not having an SPF at all. You should aim for -all (though you need to be very certain about your mail sources to do that) or at least ~all.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
FTP output from Wireshak 6 87
Best secure sending email service 1 60
policy routing to fw2 18 66
Advice for Customer Feedback and Retention system required for car dealer 3 89
SSL is a very common protocol used these days when browsing the web.  The purpose is to provide security to communication, but how does it do it?  There are several pieces at work that have to be setup before SSL will even work and it requires both …
How can MDaemon MRK files and MSG files work together? We can also say that, how worldclient and Outlook connecter works, using both application collectively you can view your mails, contacts, calendar, task, notes. In this article you can unders…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this Experts Exchange video Micro Tutorial, I'm going to show how small business owners who use Google Apps can save money by setting up what is called a catch-all email address in their Gmail accounts. By using the catch-all feature, small busin…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question