Link to home
Start Free TrialLog in
Avatar of Aleks
AleksFlag for United States of America

asked on

Check for SPF records of a domain name

We have a web application that will allow users to use their own email address (domain name) to send emails.  We are requesting their add the SPF record below, so that when our server sends an email using their domain name it checks and OK the email.

v=spf1 include:mail.bluedot-immigration.com ?all

Questions:

1. Is this process correct ?
2. Is the SPF above correct ?
3. How can we check that the SPF record has been added to their domain DNS records ?
4. What to do if they don't have a personal domain name and use google or yahoo email ?

Help is appreciated.
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

If the client does not have their own domain name, then you simply cannot allow them to use your service. You are basically spoofing the address, which is considered a major problem on the internet, hence the use of SPF records to combat it. Google etc are very protective and you will find emails get rejected.

As for checking the SPF records, they are just DNS records, so you can use any of the numerous online DNS lookup tools to confirm they are in place.

I have left your first two points to last, because there is no single answer to those questions.
If you get SPF records wrong then it can mean that emails get dropped by the sites using them as a hard failure.
Furthermore, there is no single answer to SPF records, hence the use of wizards online to create them. Your records do not take in to account how a client may send their email, instead you are opening them to spoofing. If a client already has SPF records and then replaces that with the one you have outlined they could be causing themselves further problems.

Rather than dictating the SPF record, you should point the client at one of the many wizards online and ask them to include your server address in the record. That will allow them to correctly setup the record for their mail delivery method.

Simon.
ASKER CERTIFIED SOLUTION
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial