SPF records - Dotable

RuKiwi · 25th May 2006, 10:27 PM

Is anybody had a go on installing SPF records for domains? Does it worth the time?
SPF - http://www.openspf.org/

Brad · 26th May 2006, 06:58 AM

Hello Dataosk,

I have the SPF Record on my site and all of my customers sites.
I just pasted the same on all - since I needed nothing fancy.
You just add to your DNS Zone for each domain - too easy !

Worth it - It is surpose to be ! and on the DNS Report - it gets a pass

DNS Zone Line to enter:
Domain = domain.com.au
TTL = 14400
Record Type = TXT
Info = "v=spf1 a mx ~all"

Hope that Helps

Brad

Wiseburn · 26th May 2006, 06:58 AM

SPF is easy to add to your domain, it's just a TXT record to add to your DNS. When some spammer decides to send spam using your domain in the from address, ISPs who check SPF records will reject it on the spot so you don't get the bounces.

SPF stops forgeries.

The next step is to setup your MX to test if incoming mail is forged.
this along with greylisting really cuts incoming spam.

The problem with SPF is it breaks forwarding. Email Forwarders need to switch to "remailing".

Code:

steve@maggie:~$ host -t TXT wiseburn.net
wiseburn.net            TXT     "v=spf1 a mx -all"

If you start getting bounces from people who have forwarding setup, change that "-" to a "?".

the more domains that setup SPF records, the better it will work.

Yahoo! has a competing methodology called domain keys. Microsoft is working on "sender ID", however they still publish SPF records.

Steve

RuKiwi · 26th May 2006, 01:03 PM

Thanks guys.
Diffidently will use it.
Why not to use, if SPF stops forgeries, who can not ignor it!?

Cheers,
Aleks

Wiseburn · 27th May 2006, 06:17 AM

Quote:

Originally Posted by Dataosk

Thanks guys.
Diffidently will use it.
Why not to use, if SPF stops forgeries, who can not ignor it!?

If you have many remote users for your domain that do not send out email thru your servers. SPF is harder to implement. Get those users to use SMTP AUTH and use your MX for outbound mail.

Then you can add SPF records to your domain.

Steve

Vinno · 27th July 2006, 11:45 AM

Quote:

Originally Posted by Wiseburn

The problem with SPF is it breaks forwarding. Email Forwarders need to switch to "remailing".

I just added "v=spf1 a mx ip4:205.134.250.2 -all" since im on Saturn server.

Dont understand what you mean by breaking forwarding?

RuKiwi · 15th September 2006, 10:30 AM

Just added line to the end of my Zone Templates

Code:

 %domain%. IN TXT "v=spf1 a mx -all"

Now all new accounts come up loaded with SPF record

25th May 2006, 10:27 PM	#1 (permalink)
RuKiwi Senior Member Join Date: May 2006 Location: New Zealand Posts: 153	SPF records Is anybody had a go on installing SPF records for domains? Does it worth the time? SPF - http://www.openspf.org/

26th May 2006, 06:58 AM	#3 (permalink)
Wiseburn New Dotable member Join Date: May 2006 Posts: 8	SPF is easy to add to your domain, it's just a TXT record to add to your DNS. When some spammer decides to send spam using your domain in the from address, ISPs who check SPF records will reject it on the spot so you don't get the bounces. SPF stops forgeries. The next step is to setup your MX to test if incoming mail is forged. this along with greylisting really cuts incoming spam. The problem with SPF is it breaks forwarding. Email Forwarders need to switch to "remailing". Code: steve@maggie:~$ host -t TXT wiseburn.net wiseburn.net TXT "v=spf1 a mx -all" If you start getting bounces from people who have forwarding setup, change that "-" to a "?". the more domains that setup SPF records, the better it will work. Yahoo! has a competing methodology called domain keys. Microsoft is working on "sender ID", however they still publish SPF records. Steve

15th September 2006, 10:30 AM	#7 (permalink)
RuKiwi Senior Member Join Date: May 2006 Location: New Zealand Posts: 153	Just added line to the end of my Zone Templates Code: %domain%. IN TXT "v=spf1 a mx -all" Now all new accounts come up loaded with SPF record

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

26th May 2006, 06:58 AM	#2 (permalink)
Brad Smiling can be Infectious Join Date: Jan 2006 Posts: 57	Hello Dataosk, I have the SPF Record on my site and all of my customers sites. I just pasted the same on all - since I needed nothing fancy. You just add to your DNS Zone for each domain - too easy ! Worth it - It is surpose to be ! and on the DNS Report - it gets a pass DNS Zone Line to enter: Domain = domain.com.au TTL = 14400 Record Type = TXT Info = "v=spf1 a mx ~all" Hope that Helps Brad

26th May 2006, 01:03 PM	#4 (permalink)
RuKiwi Senior Member Join Date: May 2006 Location: New Zealand Posts: 153	Thanks guys. Diffidently will use it. Why not to use, if SPF stops forgeries, who can not ignor it!? Cheers, Aleks