Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SPF: Help

SPF Record Setup

 

 

SPF help RSS feed   Index | Next | Previous | View Threaded


rcaron at nwdemarc

Mar 20, 2008, 3:23 PM

Post #1 of 5 (1417 views)
Permalink
SPF Record Setup

I have setup an SPF record to prevent our e-mails from
being spoofed. But I don't know it is right.

I have on domain

Nwdemarc.com

And the mail is at mail.nwdemarc.com and the back up is at
mx2.dnsmadeeasy.com. I used the spf wizard and this is what I got.

"v=spf1 ip4:209.180.202.197/24 a mx a:mx2.dnsmadeeasy.com
a:mail.nwdemarc.com ~all"

mail.nwdemarc.com is the only server that sends out mail.
mx2.dnsmadeeasy.com only collects mail when mail.nwdemarc.com is down.
When mail.nwdemarc.com is up and ready for mail mx2.dnsmadeeasy.com
sends all the mail that it collets to mail.nwdemarc.com.


I am hopping that this is right.

Thank you

Rob Caron

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


rob.macgregor at gmail

Mar 20, 2008, 3:41 PM

Post #2 of 5 (1360 views)
Permalink
Re: SPF Record Setup [In reply to]

On Thu, Mar 20, 2008 at 10:23 PM, rcaron <rcaron [at] nwdemarc> wrote:
> I have setup an SPF record to prevent our e-mails from
> being spoofed. But I don't know it is right.
>
> I have on domain
>
> Nwdemarc.com
>
> And the mail is at mail.nwdemarc.com and the back up is at
> mx2.dnsmadeeasy.com. I used the spf wizard and this is what I got.
>
> "v=spf1 ip4:209.180.202.197/24 a mx a:mx2.dnsmadeeasy.com
> a:mail.nwdemarc.com ~all"
>
> mail.nwdemarc.com is the only server that sends out mail.
> mx2.dnsmadeeasy.com only collects mail when mail.nwdemarc.com is down.
> When mail.nwdemarc.com is up and ready for mail mx2.dnsmadeeasy.com
> sends all the mail that it collets to mail.nwdemarc.com.

In that case, all you need is:

"v=spf1 ip4:209.180.202.197 -all"

--
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


Dan_Mitton at ymp

Mar 20, 2008, 3:50 PM

Post #3 of 5 (1349 views)
Permalink
Re: SPF Record Setup [In reply to]

Rob,

I'm not sure that I would agree with the spf wizard. Lets break it down:

ip4:209.180.202.197/24 - is kind of odd. The /24 says only 24 bits are
significant so 209.180.202.0-209.180.202.255 are valid

a - says any a record

mx - any mx record

a:mx2.dnsmadeeasy.com - specifically mx2.dnsmadeeasy.com

a:mail.nwdemarc.com - specifically mail.nwdemarc.com

~all - soft fail

If you have a static IP address that you know is not going to change,
something like:

"v=spf1 ip4:209.180.202.197 ~all"

should be all you need. You could also do:

"v=spf1 a:mail.nwdemarc.com ~all"

but the first one saves a DNS lookup on the receiving side.

You might also want to consider using -all, hard fail, rather then the
soft fail.

Dan



Please respond to spf-help [at] v2

To: <spf-help [at] v2>
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject: [spf-help] SPF Record Setup
LSN: Not Relevant
User Filed as: Not a Record

I have setup an SPF record to prevent our e-mails from
being spoofed. But I don't know it is right.

I have on domain

Nwdemarc.com

And the mail is at mail.nwdemarc.com and the back up is at
mx2.dnsmadeeasy.com. I used the spf wizard and this is what I got.

"v=spf1 ip4:209.180.202.197/24 a mx a:mx2.dnsmadeeasy.com
a:mail.nwdemarc.com ~all"

mail.nwdemarc.com is the only server that sends out mail.
mx2.dnsmadeeasy.com only collects mail when mail.nwdemarc.com is down.
When mail.nwdemarc.com is up and ready for mail mx2.dnsmadeeasy.com
sends all the mail that it collets to mail.nwdemarc.com.


I am hopping that this is right.

Thank you

Rob Caron

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com



-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


rcaron at nwdemarc

Mar 20, 2008, 4:04 PM

Post #4 of 5 (1352 views)
Permalink
RE: SPF Record Setup [In reply to]

Rob,

Thanks

Well thanks that's way too easy.


Rob Caron

-----Original Message-----
From: Rob MacGregor [mailto:rob.macgregor [at] gmail]
Sent: Thursday, March 20, 2008 3:42 PM
To: spf-help [at] v2
Subject: Re: [spf-help] SPF Record Setup

On Thu, Mar 20, 2008 at 10:23 PM, rcaron <rcaron [at] nwdemarc> wrote:
> I have setup an SPF record to prevent our e-mails from
> being spoofed. But I don't know it is right.
>
> I have on domain
>
> Nwdemarc.com
>
> And the mail is at mail.nwdemarc.com and the back up is at
> mx2.dnsmadeeasy.com. I used the spf wizard and this is what I got.
>
> "v=spf1 ip4:209.180.202.197/24 a mx a:mx2.dnsmadeeasy.com
> a:mail.nwdemarc.com ~all"
>
> mail.nwdemarc.com is the only server that sends out mail.
> mx2.dnsmadeeasy.com only collects mail when mail.nwdemarc.com is
down.
> When mail.nwdemarc.com is up and ready for mail mx2.dnsmadeeasy.com
> sends all the mail that it collets to mail.nwdemarc.com.

In that case, all you need is:

"v=spf1 ip4:209.180.202.197 -all"

--
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


rcaron at nwdemarc

Mar 21, 2008, 8:12 AM

Post #5 of 5 (1348 views)
Permalink
RE: SPF Record Setup [In reply to]

Thanks Dan


This is what I have listed in my dns

"v=spf1 ip4:209.180.202.197 -all"

You are right it is a static IP and it will change. Thank god for
transparent fire walls.

It is all updated thanks a lot.


Rob C


-----Original Message-----
From: Dan_Mitton [at] ymp [mailto:Dan_Mitton [at] ymp]
Sent: Thursday, March 20, 2008 3:50 PM
To: spf-help [at] v2
Subject: Re: [spf-help] SPF Record Setup

Rob,

I'm not sure that I would agree with the spf wizard. Lets break it
down:

ip4:209.180.202.197/24 - is kind of odd. The /24 says only 24 bits are
significant so 209.180.202.0-209.180.202.255 are valid

a - says any a record

mx - any mx record

a:mx2.dnsmadeeasy.com - specifically mx2.dnsmadeeasy.com

a:mail.nwdemarc.com - specifically mail.nwdemarc.com

~all - soft fail

If you have a static IP address that you know is not going to change,
something like:

"v=spf1 ip4:209.180.202.197 ~all"

should be all you need. You could also do:

"v=spf1 a:mail.nwdemarc.com ~all"

but the first one saves a DNS lookup on the receiving side.

You might also want to consider using -all, hard fail, rather then the
soft fail.

Dan



Please respond to spf-help [at] v2

To: <spf-help [at] v2>
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject: [spf-help] SPF Record Setup
LSN: Not Relevant
User Filed as: Not a Record

I have setup an SPF record to prevent our e-mails from
being spoofed. But I don't know it is right.

I have on domain

Nwdemarc.com

And the mail is at mail.nwdemarc.com and the back up is at
mx2.dnsmadeeasy.com. I used the spf wizard and this is what I got.

"v=spf1 ip4:209.180.202.197/24 a mx a:mx2.dnsmadeeasy.com
a:mail.nwdemarc.com ~all"

mail.nwdemarc.com is the only server that sends out mail.
mx2.dnsmadeeasy.com only collects mail when mail.nwdemarc.com is down.
When mail.nwdemarc.com is up and ready for mail mx2.dnsmadeeasy.com
sends all the mail that it collets to mail.nwdemarc.com.


I am hopping that this is right.

Thank you

Rob Caron

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com



-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

SPF help RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.