Timeline for When moving my web hosting but keeping mail hosting, how do I change the SPF TXT DNS record with an IP address?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 9, 2021 at 19:28 | comment | added | davidgo | I agree on your comment - but its important that softfail means the overwhelming majority of mail servers will accept mail from other mail servers. | |
| Jan 9, 2021 at 18:17 | comment | added | Jivan Pal |
@davidgo, it is only incorrect as far as strict SPF rules are concerned, but the vast majority of production mail deployments use SOFTFAIL. It is up to OP to decide whether they would prefer to use -all and risk mail delivery failures if their SPF rule is incorrect. I would advise sticking with ~all, checking SPF test results from different mail providers, and investigating any SOFTFAIL results. The assumption that mail.example.com is also the outgoing server is based on the info provided in OP's question. If this is not the case, they should clarify.
|
|
| Jan 9, 2021 at 5:57 | comment | added | davidgo | This advice is incorrect. ~all will allow all mail through. You need "-all" to drop mail not originating from the IP addresses associated with the MX records. You are also assuming the web server is relaying its mail through the server associated with the MX records - which is not a safe assumption. | |
| Jan 8, 2021 at 8:15 | history | answered | Jivan Pal | CC BY-SA 4.0 |