At Rocketseed we eat, sleep and breathe email. We understand that your email is a business critical tool and strive to make this medium as reliable, secure and effective as possible. One of the best ways to protect your organisation’s email reputation is by implementing SPF records; it’s quick, easy to do and makes a big difference in our fight against spam. Here’s what you need to know:-
What is SPF?
Sender Policy Framework (SPF) is a DNS-based email validation system designed to prevent email spam by detecting spoofed mail senders, a common vulnerability that accounts for a large portion of all spam sent.
How will it help me?
If a domain publishes an SPF record, spammers and phishers are less likely to forge e-mails pretending to be from that domain, since the forged e-mails are more likely to be caught in spam filters which check the SPF record. Therefore, an SPF-protected domain is less attractive to spammers and phishers.
Since an SPF-protected domain is less attractive as a spoofed address, it is less likely to be blacklisted by spam filters and so ultimately the legitimate e-mail from the domain is more likely to get through.
What do I need to consider?
To get the best results from implementing SPF it is very important to include all IP addresses that will be sending mail using your domain name such as:-
- Email servers and gateways who deliver directly to the internet
- Web servers who generate emails e.g. confirmations.
- 3rd party suppliers who send billing and statement information
- Mass mailing platforms who distribute newsletters and other company information.
How do I implement it?
You would need to contact your DNS provider to create an SPF record that covers all the IPs in your organisation that do final delivery of mail. If you are managing your DNS yourself there are some excellent resources available on the internet to guide you through the creation of the DNS record.
I want to know more
The best information resources on the subject is undoubtedlyhttp://www.openspf.net/