Spf Record Generator Microsoft

  1. Spf Record Generator Microsoft Word
  2. Spf Record Generator Microsoft Office 2016
  3. Microsoft Spf Record
  4. Spf Record Generator Microsoft Teams
Spf Record Generator Microsoft


Sender Policy Framework (SPF) is a method of fighting spam. As more time passes, this protocol will be used as one of the standard methods of fighting spam on the Internet. An SPF record is a TXT record that is part of a domain's DNS zone file. The TXT record specifies a list of authorized host names/IP addresses that mail can originate from for a given domain name. Once this entry is placed within the DNS zone, no further configuration is necessary to take advantage of servers that incorporate SPF checking into their anti-spam systems. This SPF record is added the same way as a regular A, MX, or CNAME record.

Sender Policy Framework (SPF) is an open standard specifying a technical method to prevent sender address forgery. We strongly recommend creating an SPF record to ensure that recipients recognize forged messages sent using your domain. Note: in most cases there must be only one record per domain, and it must be published as a TXT resource.

The authoritative source for this information can be found here: http://www.openspf.net/SPF_Record_Syntax.

Spf Record Generator Microsoft Word

  • Apart from tools to generate your own SPF record, many email services will provide you with the exact strings to add to your SPF record. When you add a domain name to Office 365 Microsoft advises you of the SPF record they suggest, which is appropriate for organizations sending their outbound email using Exchange Online Protection.
  • ABOUT SPF RECORD GENERATOR Welcome to MxToolbox’s SPF record generator. This tool can help you generate a SPF Record or modify your current SPF Record as well as to check the modified record has the correct syntax If you want to modify an existing SPF Record from a domain, please look for the domain in question.
  • This is link to a Microsoft provided SPF record generator. It is a step-by-step generator to assist. Microsoft SPF Generator Link. 0 Kudos Highlighted. New Member ‎ 02:58 PM. Mark as New; Bookmark; Subscribe; Subscribe to RSS Feed; Permalink; Print; Email to a Friend.
  • An SPF record is a TXT record that is part of a domain’s DNS (Domain Name Service). An SPF record lists all authorized hostnames / IP addresses that are permitted to send email on behalf of your domain. What effect does an SPF record have? Some email recipients strictly require SPF.


Your domain must be using (mt) nameservers:

Spf Record Generator Microsoft

For information on how to confirm this for your domain, see this article: Performing a WHOIS search.


This article is provided as a courtesy. Installing, configuring, and troubleshooting custom DNS settings is not supported by (mt) Media Temple. Please take a moment to review our Statement of Support.


Watch this video to learn how to create an SPF record.

Example record

As a courtesy, we've come up with a generic SPF record that should work quite effectively for you.

Be sure to replace xxx.xxx.xxx.xxx with your server's IP address.


If you send email through your mail servers at Media Temple and also through another mail server (such as your ISP's mail server in the case of restricted port 25 access), you can add an 'include:' mechanism in your SPF record to include the SPF records for the servers you use. For example:

The above would work if your domain name is gs-example.com and you also send mail through adelphia.net's mail servers.

Before including your ISP in this manner, you must make sure that the domain you provide also has an SPF record set up. You can check this at http://dnsstuff.com/, http://www.kitterman.com/spf/validate.html or other third-party services by doing a DNS lookup for TXT. If you are using Google Apps for your domain, please see the following guide at http://www.google.com/support/a/bin/answer.py?answer=178723


  1. Log into your Account Center.
  2. Click on the domain you wish to add the SPF to.
  3. Click the Edit DNS Zone File option under the DNS & Zone Files menu.
  4. Click + Add Row to create a new record. Set the type to TXT and enter your SPF record in the right column.

    Be sure to replace xxx.xxx.xxx.xxx with your server's IP address.

  5. Click Save to commit the changes.

You can also use this SPF wizard: http://spfwizard.com/.

Stop receiving spoofed emails and bouncebacks

Spamming with a fake reply-to address (yours) is called 'spoofing.' Since the email appears to be coming from your server, complaints and bouncebacks from the spam will often be redirected to your server, rather than the actual spammer. You may also receive some of the original spam - spam that appears to be coming from you!

Adding an SPF record to your zone file is the best way to stop spammers from using this technique with your domain. An SPF record will eliminate a high proportion of the bouncebacks you've been getting, because other mail providers will reject the email immediately without sending a bounceback to the (spoofed) reply-to address. While the SPF record is not 100% effective, because not all mail providers check for it, you should notice a drastic decrease in the amount of bouncebacks you receive.

If you are also receiving the original spoofed emails (that look like spam coming from yourself) you can add the spammer to your block list. You will need to look at the header from one of the spam emails. Look for the very last line that starts with Received. You want to check for the IP address or domain that the message is coming from, not to or received by. Add this IP or domain to your block list in your spam filter.

If you look at your header and find out that the spam actually is coming from your own server, you should proceed to our Security Resources article, as this may indicate a compromise.

Activate incoming mail SPF filtration on DV


Enable incoming SPF Filtration

Your DV can be set up to accept messages only from senders that can pass varying degrees of SPF verification. This is useful for avoiding large amounts of unsolicited error messages, spam from forged email addresses, and other auto-reply clutter.

  1. Navigate to the Server Management - Tools & Settings area of Plesk
  2. Access your Mail Server Settings from the Mail menu.
  3. Enable the option Switch on SPF spam protection.

Spf Record Generator Microsoft
    From this point, you can choose between a few different types of SPF checking modes.
    Here is a bit more info on the different SPF filtration options:
  • The Only create Received-SPF headers, never block option will accept all incoming messages regardless of SPF check results.
  • The Use temporary error notices when you have DNS lookup problems option will accept all incoming messages, regardless of SPF check results. It will send an error notice if an SPF check failed due to DNS lookup problems.
  • The option
Reject mail when SPF resolves to 'fail' (deny)
    (deny) will reject messages from senders who are not authorized to use the domain in question. This would be a good option to use if you are noticing large amounts of spoofing spam.
  • The option Reject mail when SPF resolves to 'fail' (deny) will reject the messages that are most likely from senders who are not authorized to use the domain in question. This is a bit more strict, and may not be necessary to activate. We recommend allowing some time with a less strict setting to see if that resolves the issue first.
  • To reject the messages from senders who cannot be identified by the SPF system as authorized or not authorized because the domain has no SPF records published, choose the option Reject mail when SPF resolves to neutral. This setting is not usually recommended, as not all domains have SPF records, and you may miss traffic from legitimate sources.
  • To reject the messages that do not pass SPF check for any reason (for example, when sender's domain does not implement SPF and SPF checking returns the 'unknown' status), select the option Reject mail when SPF does not resolve to 'fail' (deny). This strictness level is not usually recommended.
  • If you need to specify additional rules that are applied by the spam filter before the SPF check is actually done by the mail server, type the rules you need in the SPF local rules box. While configuration on this level is outside of what (mt) Media Temple supports, for more information on SPF rules visit: http://tools.ietf.org/html/rfc4408.
  • To specify the rules that are applied to domains that do not publish SPF records, type the rules into the SPF guess rules box.
  • If you'd like to specify a notice that is returned to the sender when a message is rejected for failing SPF, type it into the SPF explanation text box. If nothing is specified, the default bounceback error text will be used for notification.
  • To save your changes, click OK at the bottom of the menu.
  • cPanel

    cPanel provides a simple interface for generating an SPF for outgoing mail protection. These steps must be completed for each domain that you would like to enable protection.

    For SPF records

    1. Log into cPanel and select Authentication from the email menu.

    2. Scroll down to the SPF section and click Enable.

    3. Scroll to the bottom and apply your new settings by clicking Update.

    To enable DKIM protection for incoming mail, repeat these steps but select DKIM.

    Alternate/Additional Domains

    If you'd like to set up SPF records for an Alternate Domain, please make sure that you are adding the TXT record to the proper zone. The SPF record for my-example-domain-2.com does not belong in example.com's DNS zone listing, but rather in the DNS zone of that same domain. This must be done for each domain you'd like to use SPF on as well. Simply setting it up for just the primary domain of your server will not have any impact on the SPF status of your other domain names on that same server.



    SPF, or 'Sender Policy Framework,' is a DNS record that can help fend off spam and keep your email address from being used as a cover for spam. Spammers sometimes try to fake the from and reply addresses on emails to make it look like it comes from a reputable address. You can discourage this practice by adding an SPF record. Your SPF record lists all servers that might validly send mail for your domain name. This allows email recipients to verify that a message came from a valid server.

    There are two methods for adding SPF records in your Account Control Center. There is an easy method that uses a pre-configured SPF record and a more advanced method that allows you to create your own customized SPF record. You can find both tutorials below:

    Adding an SPF Record to Your Domain (Beginner)

    If you want to use the power of SPF, but aren't very familiar with the aspects of an SPF record, you can use our pre-configured SPF record.

    The pre-configured SPF record is designed based on your account type and our email server configuration. The majority of customers will be able to use this pre-configured SPF record with no problem. However, if you have third-party software installed on your account, you may want to opt for a customized SPF record to ensure compatibility.

    Pre-configured SPF records may change without notice due to account or email server changes.

    Turning On the Pre-configured SPF Record

    To turn on the pre-configured SPF record on your domain, follow these steps:

    1. Log in to your Account Control Center (ACC)
    2. In the left sidebar, click Domains, then select Manage Your Domain Names from the drop-down
    3. Click the name of the domain you want the SPF record added to
    4. On the Manage Domain page, find the Sender Policy Framework (SPF) section and click Change SPF Settings
      The next page will display the pre-configured SPF record.
    5. To activate it, click the Activate SPF button

    This will turn the SPF record on.

    Turning Off the Pre-configured SPF Record

    To turn off the pre-configured SPF record on your domain, follow these steps:

    1. Log in to your Account Control Center (ACC)
    2. In the left sidebar, click Domains, then select Manage Your Domain Names from the drop-down
    3. Click the name of the domain you want the SPF record added to
    4. On the Manage Domain page, find the Sender Policy Framework (SPF) section and click Change SPF Settings
    5. Click the Deactivate SPF button

    SPF Failure Option: Hard Fail or Soft Fail

    On the Configure Default SPF Record page, there is a button to change the SPF record to use hard fail or soft fail. These two options are called 'qualifiers' and determine how strict your SPF record is on emails that fail to pass the SPF check. Here's the difference:


    Hard Fail

    If an SPF record uses a hard fail, the recipients will reject any email from hosts that aren't listed in the SPF record. This means that the email will never be fully delivered and cannot be retrieved by the recipient.

    Soft Fail

    Spf Record Generator Microsoft Office 2016

    If an SPF record uses soft fail, then failing emails will still be delivered, but could be considered junk mail by the recipient.

    Microsoft Spf Record

    Generally, soft fail is the preferred option because it is more lenient, while still defending against spam and email spoofing.

    Adding a Customized SPF Record to a Domain (Advanced)

    1. Log in to the Account Control Center (ACC)
    2. Click Domains
    3. Click Manage Your Domain Names
    4. Click the domain name that you want to put an SPF record on
    5. Click Manage Custom DNS Records
    6. Click Add DNS Records
    7. Next to Type Of Record, click the drop-down and select TXT
    8. Click Proceed
    9. Next to Hostname, you may either enter a specific hostname or leave the field empty to create the SPF for the entire domain

      The hostname will be a subdomain of the main domain, such as ns1.example.com.

    10. Next to Text Record, enter the SPF record. See an example of what this might look like below
    11. Click Create Record

    Spf Record Generator Microsoft Teams

    Was this article helpful?

    Related Articles