Manage SPF records

This guide explains how to add or modify one or more SPF type records in the DNS area (of a domain name) managed on the Manager Infomaniak.

Preamble

• If your domain name is registered with Infomaniak, that your e-mail is managed by Infomaniak but that the Web site is installed in another hoster ( Wix e.g.) you probably manage the DNS area (and therefore the SPF) at this other hosting company: be aware of this other guide on this subject.

Understand SPF type records

The type of recording SPF (Sender Policy Framework) is an e-mail sender domain name verification standard and aims to reduce SPAM.

It is used to indicate which server has the right or not to send emails for a domain.

If the SPF fails for an e-mail, this means that the e-mail has not been sent from a server/IP address authorized by the shipping domain administrator.

The e-mail is then considered like a spam.

Besides, Infomaniak automatically installs this type of recording when creating a Service Mail on your domain (Strict SPF):

• v=spf1 include:spf.infomaniak.ch -all

Thus the server receiving the e-mail you send will evaluate that any e-mail not from Infomaniak servers will be refused. This prevents malicious people from usurping email addresses in your domain.

You can also decide to modify the FPS to a more flexible model:

• v=spf1 include:spf.infomaniak.ch ?all

In this case, the recipient server of the e-mail you send will evaluate according to its own rules if it accepts e-mails not from Infomaniak servers.

To sum up:

• ?: the reception server Accepts the message even if the transmitter is not listed in the FPS
• ~: the reception server Accepts usually the message if it is not listed in the FPS but identifies it as a suspect
• -: the reception server rejects the message if it is not listed in the FPS ( recommended)

Adding a SPF via a TXT record

Be aware of this other guide to manage this type of recording in a DNS area.

Add several SPFs

If you are using other email providers in addition to Infomaniak, you should get their FPS then the merge with Infomaniak according to a precise syntax.

Example of 3 SPFs to be merged:

• That of Infomaniak: v=spf1 include:spf.infomaniak.ch -all
• Those of 2 secondary suppliers:
  • v=spf1 include:the-second-domain.xyz ?all
  • v=spf1 include:the-other-domain.xyz ~all

... the final FPS to be inserted in your DNS area must be in the form:

• v=spf1 include:spf.infomaniak.ch include:the-second-domain.xyz include:the-other-domain.xyz -all

Remove any other SPF entries from the DNS area of your domain!

Limits on the number of FPS

Multiple SPFs are limited to maximum 10 inclusions.

The Infomaniak FPS already has 4 inclusions:

• include:relay.mail.infomaniak.ch
• include:app.mail.infomaniak.ch
• include:newsletter.infomaniak.com
• include:amazonses.com

Check the SPF record(s)

The tool of Global security on the Manager Infomaniak allows you to easily verify and correct any problematic records.

In case of problems, it is recommended to analyze your domain name on MxToolbox to check if your FPS has syntax errors, too many inclusions, or other leads that could lead to an error:

... or directly to the address https://mxtoolbox.com/spf.aspx.