spf records

6 posts / 0 new
Last post
#1 Tue, 09/27/2005 - 14:34
bryanstalcup

spf records

create spf records by default on new domain creation

Tue, 09/27/2005 - 15:42
Joe
Joe's picture

Hey Bryan,

SPF records are supported, they just aren't enabled by default. I might re-think this position...but I'm afraid misconfiguration can lead to more problems than having no records. But at some point having no SPF record will guarantee that some hosts will refuse mail from the system, so I guess we need to take our lumps and get SPF understood now rather than later. ;-)

Anyway, turning it on is easy:

[ol]

[*] Click on Server Templates [/*]

[*] Select one of your templates (if you only use Default Settings, click it) [/*]

[*] Scroll down to the BIND section and set the following:
[list]

[*]<b>Add SPF DNS record?</b> Yes, with server's IP address[/*]

[*]&lt;b&gt;Additional SPF IPs and hostnames&lt;/b&gt; <i>Blank, unless you will be sending mail for claiming to be from your domains from another system </i>[/*]

[*]&lt;b&gt;Does SPF record cover all senders?&lt;/b&gt; Yes [/*]

[/list]

[/*]

[*] Save it [/*]

[/ol]

Now, all of your new domains will have SPF records.

Also worth noting in this discussion, there is a new feature that might not be in the software repository yet but will be later today that allows you to apply changes to a template to existing domains. This feature should be used with caution, and only by folks who exclusively configure domains using templates--if you make changes to anything covered by the templates after domain creation, this new feature could undo that change...But, if you exclusively design all of your domains with templates, it is extremely powerful (and simple to use).

I think we will probably make SPF the default from EA2 on-ward. The more I think about it, the more clear it is that not enabling it is more likely to cause long-term hassle than enabling it with incorrect configuration--misconfiguration is a one-time problem, and once solved will never been a problem again.

--

Check out the forum guidelines!

Sun, 05/14/2006 - 17:28
HarryZink

HOTMAIL and YAHOO are blocking mail from domains without SPF, so standardizing this setting (it still isn't ON by default) should be seriously considered.

Tue, 02/23/2016 - 23:11 (Reply to #3)
azcunaga

Still rings true in 2016

Mon, 08/15/2011 - 15:12
J_Web

hey guys i'm brand new at vmin.. i'm a desinger and thats about it .. very green with a lot of stuff.. anyways a couple of my clients want to use there ipads and iphones for email .. i'm not sure exactly where to copy the code and what exactly the code is .. i go to my domain on vmin then system settings then server templates, then i went to BIND DNS domain and so which box i copy the code into i duno and also exactly what i need to copy.. please help :)

Fri, 02/26/2016 - 16:38 (Reply to #5)
Joe
Joe's picture

You don't copy any code anywhere. You just turn on SPF.

Select the domain you want to edit.

Browse to Server Configuration->DNS Options

Check the box labeled "SPF record enabled?" (It's the first option).

Make sure all domains and all IPs you need to send mail from are included in the options below.

Save it.

You may also want to setup DKIM, if you'll be sending a lot of mail from this system:

https://www.virtualmin.com/documentation/email/dkim

Also note that there is online help for every option on the DNS Options page, just click on the option name and a help popup will explain what the option does in more detail.

--

Check out the forum guidelines!

Topic locked