SPF is a mechanism for restricting which mail servers are authorized to deliver email for your domain name. This framework is intended to detect and prevent email spoofing by providing a mechanism for receiving mail exchangers to verify that incoming mail from a domain comes from an IP address that has been approved by the domain's administrators.
Setting up SPF for Spam Experts Hosted Cloud Users
- Login to your DNS management console
- Navigate to Tools & Settings > DNS Template
- You need to edit the DNS TXT record related to SPF
- An SPF TXT record for Qualtrics will have the following syntax:
name.domain.com TXT v=spf1 include:spf.antispamcloud.com - Publish this record in your DNS records section for your respective domain.
Note: If you don’t have an SPF record previously for your domain, simply publish the above-mentioned record to enable SPF for outgoing emails using Spam Experts. If you do have an existing SPF record in your DNS, you need to modify it to include Spam Experts, as shown below:
Previous SPF record: v=spf1 mx -all
Modified SPF record: v=spf1 mx include:spf.antispamcloud.com
- Save changes
- Wait for 72 hours to allow your DNS to process the changes.
Set up SPF for SpamExperts Local Cloud Users
SPF record Values
If you are a Spam Experts Local Cloud User, create a TXT record listing all the Public IPs used for SMTP submission traffic. i.e if your cluster only sends outbound traffic using IP 1.2.3.4/32, a record such as this could be used:
spf.yourdomain.tld = v=spf1 ip4:1.2.3.4/32 -all
The SPF record for customers :
v=spf1 include:spf.yourdomain.tld -all
Note: It is recommended to create a similar DNS hostname, however for SPF add all cluster IP's configured to send SMTP traffic to the hostname, as multiple A records so that if IPs are changed/rotated, no changes are needed to be made to senders SPF records
spf.yourdomain.tld > A > Primary sending IP of 1st server
spf.yourdomain.tld > A > Secondary sending IP of 1st server (if configured)
spf.yourdomain.tld > A > Primary sending IP of 2nd server
spf.yourdomain.tld > A > Secondary sending IP of 2nd server (if configured)
Note :If your sending domains already use SPF, then simply add "a:spf.yourdomain.tld" to their existing DNS record. If they do not have an SPF record, and you want to configure this, (and restrict all email to the Spam Experts server), then you can create something like this:
v=spf1 a:spf.hostname.tld -all
Branded SPF record
If you want to use your own domain in your clients' SPF records, use the "include" option:
- Firstly, create a subdomain for the domain you wish to add to your clients SPF spf.yourdomain.tld
- Then create a DNS record (TXT record) for spf.yourdomain.tld with the following details:
v=spf1 include:spf.antispamcloud.com -all - Finally, add the following DNS record to your clients' domain DNS:
v=spf1 include:spf.yourdomain.tld -all
Finally, you can look up your record using our SPF record lookup tool, and enable DMARC for your domains: take a DMARC trial.
