Need Help: Setting up SPF.

SuperBaby

Well-Known Member
Nov 27, 2003
343
0
166
Thailand
cPanel Access Level
Website Owner
Twitter
http://www.openspf.org/wizard.html?mydomain=mydomain.com

I need some help in setting up SPF. I do not know what to enter (see URL above) for:

- the "a:" text box
- the "mx:" text box
- the "ip4:" text box
- the "include:" text box
- the "~all:" radio button

I only have one server and it is for common uses. I use it to host my web design customers' website as well as my own. Most websites (except one) use the shared IP. WHM/cPanel + RH9 are installed in my server.

Also, how do I know if it is working after setup?
 

RizyDeWino

Well-Known Member
Aug 1, 2005
74
0
156
Planet Earth
- the "a:" text box
Yes if you are setting it for any domain on the Main shared IP
No if you are setting if for the domain on unique IP as its IP for mail will be different from server's main IP.

- the "mx:" text box
Yes will work in most cases. (Hope you are not using multiple MX records).

- the "ip4:" text box
Ip of your mail server , and if you are using your ISP's mail server for sending mails then fill it according to their instrictions.


- the "include:" text box
openspf.org says
>>If you send mail through your ISP's servers, and the ISP has published an SPF record, >>name the ISP here.

- the "~all:" radio button
Yes.
 
Last edited:

SuperBaby

Well-Known Member
Nov 27, 2003
343
0
166
Thailand
cPanel Access Level
Website Owner
Twitter
- the "ip4:" text box
Ip of your mail server , and if you are using your ISP's mail server for sending mails then fill it according to their instrictions.

- the "include:" text box
openspf.org says
>>If you send mail through your ISP's servers, and the ISP has published an SPF record, >>name the ISP here.
Not really understand about the above two. I can of course set my ISP's info. But I have many other customers that are hosting on the same server. Some must be using their own ISPs' mail servers. Since I cannot tell what their mail servers are, how do I set this data?

I am using ThunderBird. For the SMTP server, I set it to "smtp.myisp.com" instead of "mail.mydomain.com". So I should include "smtp.myisp.com" under the "ip4:" and "include:" boxes? I am really poor in DNS. I am not sure if you are referring to this situation.
 

nyjimbo

Well-Known Member
Jan 25, 2003
1,133
1
168
New York
dont know if it helps but our SPF string is ""v=spf1 a"

In our db file for the domain the line is :


16400 IN TXT "v=spf1 a"

Thats if you edit your db record manually.
 

nicklas

Well-Known Member
Dec 22, 2005
117
0
166
cPanel Access Level
Root Administrator
Hi,

That website gives a lot of information, anyway to add it in WHM go to DNS functions
Choose: Edit DNS Zone, select the domain you want to add the spoof record too.

Add New Entries Below this Line

yourdomain. TXT "v=spf1 a ~all"


Make sure you have the dot at end of your domain, choose record TXT and enter the string.

Save

Done.
 

Izzee

Well-Known Member
Feb 6, 2004
469
0
166
You can also add it to your Zone Templates so that all new accounts that you create are covered.

This from my Zone Templates:
%domain%. IN TXT "v=spf1 a mx ptr ~all"
 
Last edited:

nicklas

Well-Known Member
Dec 22, 2005
117
0
166
cPanel Access Level
Root Administrator
Izzee said:
You can also add it to your Zone Templates so that all new accounts that you create are covered.

This from my Zone Templates:
%domain%. IN TXT "v=spf1 a mx ptr -all"

Just wondering why you have a (-) instead of the (~)
 

lloyd_tennison

Well-Known Member
Mar 12, 2004
697
1
168
Have you read the FAQ's carefully. They state that if you do any email forwwarding that SPF will break the forwarding to and SPF -aware servers.

They do not recommend using SPF with web hosting companies.
 

Izzee

Well-Known Member
Feb 6, 2004
469
0
166
Izzee said:
You can also add it to your Zone Templates so that all new accounts that you create are covered.

This from my Zone Templates:
%domain%. IN TXT "v=spf1 a mx ptr -all"
Just a typo ;).

Thanks for pointing that out. I have corrected my post now.

I must have been thinking about the host name entry:
host.domain.tld. IN TXT "v=spf1 a -all"

;)
 

nicklas

Well-Known Member
Dec 22, 2005
117
0
166
cPanel Access Level
Root Administrator
lloyd_tennison said:
Have you read the FAQ's carefully. They state that if you do any email forwwarding that SPF will break the forwarding to and SPF -aware servers.

They do not recommend using SPF with web hosting companies.

Did you test this ?
I have sent an email to a forward address and it received as normal
 
Last edited:

lloyd_tennison

Well-Known Member
Mar 12, 2004
697
1
168
It all depends on whether the forwarded address uses strict SPF. If they do, your email will be rejected. The problem is you never know who does and who does not use strict SPF and whether AOL will really totally implement it for those who have records available.

It is an unnecessary gamble for whatever dubious value SPF provides.
 

kilroy

Active Member
Jun 22, 2002
37
0
156
Thanks for that info. I have been using SPF on all the domains on my server and have noticed some email rejected when forwarded. Didn't connect the dots but now will remove SPF.

Thanks,

Roger
TrekCom Hosting