{"id":1554,"date":"2020-09-24T13:26:07","date_gmt":"2020-09-24T11:26:07","guid":{"rendered":"https:\/\/itsimple.info\/?p=1554"},"modified":"2024-11-12T15:52:17","modified_gmt":"2024-11-12T13:52:17","slug":"how-to-create-spf-dns-record-for-better-email-security","status":"publish","type":"post","link":"https:\/\/itsimple.info\/?p=1554","title":{"rendered":"How To Create SPF DNS Record for better Email Security"},"content":{"rendered":"

Sender Policy Framework<\/b> (SPF<\/b>)<\/a> is an email authentication<\/a> method designed to detect forging sender addresses during the delivery of the email.[1]<\/a><\/sup> SPF alone, though, is limited only to detect a forged sender claimed in the envelope of the email which is used when the mail gets bounced.[1]<\/a><\/sup> Only in combination with DMARC<\/a> can it be used to detect the forging of the visible sender in emails (email spoofing<\/a>[2]<\/a><\/sup>), a technique often used in phishing<\/a> and email spam<\/a><\/p>\n

SPF is a DNS TXT record. The right syntax can be achieve through online SPF wizards, just follow the instraction on the wizrads :<\/p>\n

https:\/\/www.spfwizard.net\/<\/span><\/a>\n\nhttps:\/\/mxtoolbox.com\/SPFRecordGenerator.aspx<\/span><\/a>\n\nhttps:\/\/www.spf-record.com\/generator<\/span><\/a>\n\nhttps:\/\/www.zerobounce.net\/services\/spf-generator.html<\/span><\/a><\/pre>\n
Next you will have to take the text line and create TXT record on you domain DNS provider. Few things to pay attentions to:<\/p>\n
    \n
  1. SPF DNS resolving should never be more then 10 – each setting like: a, mx, ipv4, is one resolve, “include” option might add the domain you include and all the resolving in it so be aware of that.<\/li>\n
  2. Do not do loop resolving – for example you include your domain and a “mx” or “a” option pointing to the same server or ip<\/li>\n
  3. “include” option can be add twice only ! – do not use “include” more the 2 times as the resolving time will be to long.<\/li>\n
  4. “PTR” option is deprecated – try not using this option as it is not safe enough.<\/li>\n
  5. IPV4 option get resolved faster – better if you have long record.<\/li>\n
  6. Do not have more the one SPF record – More then one SPF DNS TXT record will cause error in auth mechanism.<\/li>\n<\/ol>\n
    Once you created the record you must check the validity of the SPF record, you can do it online on this sites:<\/p>\n
    https:\/\/www.spf-record.com\/analyzer<\/span><\/a>\n\nhttps:\/\/www.kitterman.com\/spf\/validate.html?<\/span><\/a>\n
    https:\/\/toolbox.googleapps.com\/apps\/checkmx<\/a>
    \n    https:\/\/www.spf-record.de\/spf-lookup\/<\/span><\/a><\/pre>\n
    \u00a0<\/p>\n\n\n
    To Create Dmarc record you can use this web site :<\/p>\n\n\n\n
    https:\/\/easydmarc.com\/tools\/dmarc-record-generator<\/a><\/p>\n\n\n\n
    https:\/\/dmarcian.com\/dmarc-record-wizard<\/a><\/p>\n\n\n\n
    Good Luck<\/p><\/blockquote><\/figure>\n","protected":false},"excerpt":{"rendered":"
    Sender Policy Framework (SPF) is an email authentication method designed to detect forging sender addresses during the delivery of the email.[1] SPF alone, though, is limited only to detect a forged sender claimed in the envelope of the email which is used when the mail gets bounced.[1] Only in combination with DMARC can it be […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,12,1,14,15],"tags":[],"class_list":["post-1554","post","type-post","status-publish","format-standard","hentry","category-tech","category-tutorials","category-uncategorized","category-windows","category-windows-server"],"_links":{"self":[{"href":"https:\/\/itsimple.info\/index.php?rest_route=\/wp\/v2\/posts\/1554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itsimple.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itsimple.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itsimple.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/itsimple.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1554"}],"version-history":[{"count":2,"href":"https:\/\/itsimple.info\/index.php?rest_route=\/wp\/v2\/posts\/1554\/revisions"}],"predecessor-version":[{"id":2866,"href":"https:\/\/itsimple.info\/index.php?rest_route=\/wp\/v2\/posts\/1554\/revisions\/2866"}],"wp:attachment":[{"href":"https:\/\/itsimple.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itsimple.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itsimple.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}