> Based  on  feedback from a network admin friend of mine, I added SPF
> records that looked like this: "v=spf1 mx -all"

Meaning  that you will only originate mail from hosts that are also MX
records.

> However,  we  got an email today from the one of the offices that we
> changed that said now several of the office staff emails are getting
> blocked  or  flagged  are  spam.  The  tech  said we need to add our
> firewall  IP  to  SPF record entry as this is the reason some of out
> mail is getting flagged as spam.

Indicating  that  there  is  some  mail  that  hits  the outside world
directly  from  your satellite offices, which are _not_ also MXs. This
is a very common setup.

> So using the wizard I now get this:  "v=spf1 mx ip4:xxx.xx.xxx.xxx ~all"

Well, ~all is not at all as strict as -all. Why don't you find out all
of  your satellites' legit addresses and add them all as ip4: entries,
and keep -all?

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to