Sender Policy Framework (SPF) - Revision history

Sebastian at 03:44, 1 February 2025

2025-02-01T03:44:18Z

← Older revision		Revision as of 05:44, 1 February 2025
Line 96:		Line 96:
	* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]		* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]
	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]
	* [https://app.inboxsys.com/domainchecker.php ~~domainchecker~~]		* [https://app.inboxsys.com/domainchecker.php Domainchecker]
	* [[wikipedia:Sender_Policy_Framework]]		* [[wikipedia:Sender_Policy_Framework]]

Sebastian at 03:44, 1 February 2025

2025-02-01T03:44:05Z

← Older revision		Revision as of 05:44, 1 February 2025
Line 89:		Line 89:
	=SPF in InboxSys app=		=SPF in InboxSys app=

	To check your SPF record, [[Sending a message to the seedlist\|send a message to your seedlist]] and look in the [[:Category:Authentication\|authentication]] section of the [[:Category:E-Mail analysis\|E-Mail analysis]].		To check your SPF record, [[Sending a message to the seedlist\|send a message to your seedlist]] and look in the [[:Category:Authentication\|authentication]] section of the [[:Category:E-Mail analysis\|E-Mail analysis]]. Optionally, you can use the [https://app.inboxsys.com/domainchecker.php domainchecker] to check your SPF record.

	=Useful links=		=Useful links=
Line 96:		Line 96:
	* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]		* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]
	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]
			* [https://app.inboxsys.com/domainchecker.php domainchecker]
	* [[wikipedia:Sender_Policy_Framework]]		* [[wikipedia:Sender_Policy_Framework]]

Sebastian at 20:08, 12 September 2023

2023-09-12T20:08:14Z

← Older revision		Revision as of 22:08, 12 September 2023
Line 23:		Line 23:
	==Method==		==Method==

	SPF offers 8 mechanisms~~. The following 6 are the most important~~:		SPF offers 8 mechanisms:

	{\| class="wikitable" style="margin:auto"		{\| class="wikitable" style="margin:auto"
Line 29:		Line 29:
	\|-		\|-
	! Switch !! Example !! Description		! Switch !! Example !! Description
			\|-
			! scope="row"\| A
			\|\| <code>A</code> \|\| Matches the domain's A-record.
			\|-
			! scope="row"\| All
			\|\| <code>ALL</code> \|\| Matches always. This mechanism is rarely used.
			\|-
			! scope="row"\| EXISTS
			\|\| <code>exists:example.com</code> \|\| Matches the IP behind the domain. Can be used with [https://www.jamieweb.net/blog/using-spf-macros-to-solve-the-operational-challenges-of-spf/ SPF macro language] and is rarely used.
	\|-		\|-
	! scope="row"\| IP4		! scope="row"\| IP4
Line 38:		Line 47:
	! scope="row"\| INCLUDE		! scope="row"\| INCLUDE
	\|\| <code>include:subdomain.example.com</code> \|\| Include the results of the SPF record of another domain.		\|\| <code>include:subdomain.example.com</code> \|\| Include the results of the SPF record of another domain.
	\|-
	~~! scope="row"\| A~~
	~~\|\| <code>A</code> \|\| Matches the domain's A-record.~~
	\|-		\|-
	! scope="row"\| MX		! scope="row"\| MX
Line 59:		Line 65:
	\|-		\|-
	! scope="row"\| +all		! scope="row"\| +all
	\|\| PASS		\|\| PASS \|\| SPF returns PASS, even if it fails. This renders SPF obsolete and is not considered valid by all [[ISP]]s.
	\|-		\|-
	! scope="row"\| ?all		! scope="row"\| ?all
	\|\| NEUTRAL		\|\| NEUTRAL \|\| SPF returns NEUTRAL, even if it fails.
	\|-		\|-
	! scope="row"\| ~all		! scope="row"\| ~all
	\|\| SOFTFAIL		\|\| SOFTFAIL \|\| SPF returns SOFTFAIL when it fails.
	\|-		\|-
	! scope="row"\| -all		! scope="row"\| -all
	\|\| FAIL		\|\| FAIL \|\| SPF returns FAIL when it fails. Can break things when using [[mailing lists]].
	\|}		\|}

Line 90:		Line 96:
	* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]		* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]
	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]
			* [[wikipedia:Sender_Policy_Framework]]

Sebastian at 13:05, 3 September 2023

2023-09-03T13:05:08Z

← Older revision		Revision as of 15:05, 3 September 2023
Line 87:		Line 87:
	=Useful links=		=Useful links=

			* [https://international.eco.de/download/223621/ E-Mail authentication for senders]
			* [https://international.eco.de/download/209121/ E-Mail authentication for recipients]
	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]

Sebastian at 22:47, 2 September 2023

2023-09-02T22:47:20Z

← Older revision		Revision as of 00:47, 3 September 2023
Line 11:		Line 11:
	</pre>		</pre>

	In this example, the domain "example.com" is strictly and only allowed to send from IP ''1.2.3.4'' or from the CIDR network ''4.3.2.0/24'' (4.3.2.1 - 4.3.2.254). This example-record consists of 3 parts:		In this example, the domain "example.com" is strictly and only allowed to send from IP ''1.2.3.4'' or from the [[CIDR]] network ''4.3.2.0/24'' (4.3.2.1 - 4.3.2.254). This example-record consists of 3 parts:

	# Version (v=spf1)		# Version (v=spf1)

Sebastian at 22:46, 2 September 2023

2023-09-02T22:46:35Z

← Older revision		Revision as of 00:46, 3 September 2023
Line 5:		Line 5:
	=Functionality=		=Functionality=

	An SPF record is a [DNS] TXT record that defines which IPs are allowed to send with the domain in question. An example of a very simple SPF record is:		An SPF record is a [[DNS]] TXT record that defines which IPs are allowed to send with the domain in question. An example of a very simple SPF record is:

	<pre>		<pre>

Sebastian at 22:00, 2 September 2023

2023-09-02T22:00:36Z

← Older revision		Revision as of 00:00, 3 September 2023
Line 43:		Line 43:
	\|-		\|-
	! scope="row"\| MX		! scope="row"\| MX
	\|\| <code>MX</code> \|\| Matches all IPs in the domain's MX-record.		\|\| <code>MX</code> \|\| Matches all IPs in the domain's [[MX-Record\|MX-record]].
	\|-		\|-
	! scope="row"\| PTR		! scope="row"\| PTR

Sebastian at 16:53, 31 August 2023

2023-08-31T16:53:56Z

← Older revision		Revision as of 18:53, 31 August 2023
Line 80:		Line 80:
	=Controversy around SPF=		=Controversy around SPF=
	''Main article: [[Controversy around SPF]]''		''Main article: [[Controversy around SPF]]''

			=SPF in InboxSys app=

			To check your SPF record, [[Sending a message to the seedlist\|send a message to your seedlist]] and look in the [[:Category:Authentication\|authentication]] section of the [[:Category:E-Mail analysis\|E-Mail analysis]].

	=Useful links=		=Useful links=

	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]

Sebastian at 13:21, 31 August 2023

2023-08-31T13:21:51Z

← Older revision		Revision as of 15:21, 31 August 2023
Line 77:		Line 77:

	SPF aligns when the RFC5321.MailFrom domain matches the [[RFC5322.From]] domain. In laymen terms: When the envelope-from domain matches the sender domain.		SPF aligns when the RFC5321.MailFrom domain matches the [[RFC5322.From]] domain. In laymen terms: When the envelope-from domain matches the sender domain.

			=Controversy around SPF=
			''Main article: [[Controversy around SPF]]''

	=Useful links=		=Useful links=

	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]

Sebastian at 12:55, 31 August 2023

2023-08-31T12:55:45Z

← Older revision		Revision as of 14:55, 31 August 2023
Line 75:		Line 75:
	=Alignment=		=Alignment=
	''Main article: [[Alignment]]''		''Main article: [[Alignment]]''

			SPF aligns when the RFC5321.MailFrom domain matches the [[RFC5322.From]] domain. In laymen terms: When the envelope-from domain matches the sender domain.

	=Useful links=		=Useful links=

	* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]		* [https://www.rfc-editor.org/rfc/rfc7208.html RFC 7208]