Home / server / Questions / 284409
Accepted
LanceBaynes
Asked: 2011-06-27 23:13:54 +0800 CST

How to properly set SPF record in my domain (Google Apps)

  • 772

http://www.google.com/support/a/bin/answer.py?answer=178723

How to properly set up my mailservers DNS record? I mean is it good to only set a:

v=spf1 include:_spf.google.com ~all

or is it better to:

v=spf1 include:_spf.google.com ?all
domain-name-system spam

2 Answers

  1. I'm aware this question has been answered, and the answer accepted, but I'll put my line in the sand anyway for future readers.

    In my opinion, both ~all and ?all are wrong. As a mail server admin, they are both useless to me, and I give no preference to mail that satisfies either of those records. The only meaningful use of SPF is to say which hosts aren't allowed to send mail from your domain by listing those which are, and then removing permission from all others with the -all record.

    If you're going to the trouble of setting up SPF records, please, please itemise the addresses that can send email from you, and interdict all the others. If you go to that trouble, then I'll have genuine interest in email which both claims to be from your domain and comes from the handful of hosts that you have permitted to send mail from you.

    • 6
  2. Best Answer

    "?all" basically means no test. If you are required to setup a SPF, but do not want any actual impact, then the "?all" will accomplish that.

    • 3