Mailing List Archive

Hi Mike,

Do your clients relay their outbound mail through your server, or do
they relay through their ISP's server?

Regards
Bob Davis
______________________________ Reply Separator _________________________________
Subject: [spf-help] Adding SPF records to client's DNS
Author: "Mike Wagenti" <mike@vroooom.net> at Internet
Date: 10/1/2004 5:10 AM


If you're hosting multiple client's e-mail on a server and their MX record
is "mail.theirdomainname.com" and each client points to the same IP address
of the mail server, how do you properly create the SPF if the client uses a
different Internet Connection/ISP?

Since we know our own IP range, we can easily set up our SPF records for our
domain name, but the client's SPF is where we're having trouble getting it
to work.


Mike

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

SPF is a one-many relationship. When SPF lookups occur it doesn't care
if there are thousands of domains pointing to the same IP. You only need
one SPF record for that domain. So, if all the clients are using the
same configuration or same relay then your job should be pretty easy
because your SPF record will be the same for all domains managed.

If they use their ISP's mail host then you will have to add that isp
mailhost for each domain. So if clientA uses ISPA then your spf for
domainA would have the ISPA as an optional sender domain. ClientB uses
ISPB then your spf for domainB would have ISPB as an optional sender


HTH

-----Original Message-----
From: owner-spf-help@v2.listbox.com
[mailto:owner-spf-help@v2.listbox.com] On Behalf Of Mike Wagenti
Sent: Friday, October 01, 2004 5:11 AM
To: spf-help@v2.listbox.com
Subject: [spf-help] Adding SPF records to client's DNS

If you're hosting multiple client's e-mail on a server and their MX
record is "mail.theirdomainname.com" and each client points to the same
IP address of the mail server, how do you properly create the SPF if the
client uses a different Internet Connection/ISP?

Since we know our own IP range, we can easily set up our SPF records for
our domain name, but the client's SPF is where we're having trouble
getting it to work.


Mike

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription, please go to
http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com


--------------------------------------------------------------------------------
This email is intended only for the named recipents. All email is monitored and archived for compliance requirements.
The views or context in this message may not reflect the view or context of the company.
--------------------------------------------------------------------------------



-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

On Fri, Oct 01, 2004 at 05:10:46AM -0400, Mike Wagenti wrote:
> If you're hosting multiple client's e-mail on a server and their MX record
> is "mail.theirdomainname.com" and each client points to the same IP address
> of the mail server, how do you properly create the SPF if the client uses a
> different Internet Connection/ISP?
>
> Since we know our own IP range, we can easily set up our SPF records for our
> domain name, but the client's SPF is where we're having trouble getting it
> to work.

Let me get this straight, your problem is that clients send email from
whatever mail server they like, and you are wondering how to set up spf
for the domains used??

The most obvious options are:

- if the isp's publish spf themselve, ?include: them
- if the isp's don't, try to figure out the ip adresses and add them
with ?ip4
- the best option: make the clients connect to one of your mailservers
by way of smtp-auth

Koen

--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

Hello Bob,

Our clients relay email through our mail server. I have our mail server set
to use POP3 before SMTP, but I also want to be sure that we have the
client's SPF record set up properly, using the correct mechanism, (mx, a,
ptr,...) if necessary.

Thanks in advance,

Mike

-----Original Message-----
From: owner-spf-help@v2.listbox.com
[mailto:owner-spf-help@v2.listbox.com]On Behalf Of Bob Davis
Sent: Friday, October 01, 2004 12:11 PM
To: spf-help@v2.listbox.com
Subject: Re: [spf-help] Adding SPF records to client's DNS


Hi Mike,

Do your clients relay their outbound mail through your server, or do
they relay through their ISP's server?

Regards
Bob Davis
______________________________ Reply Separator
_________________________________
Subject: [spf-help] Adding SPF records to client's DNS
Author: "Mike Wagenti" <mike@vroooom.net> at Internet
Date: 10/1/2004 5:10 AM


If you're hosting multiple client's e-mail on a server and their MX record
is "mail.theirdomainname.com" and each client points to the same IP address
of the mail server, how do you properly create the SPF if the client uses a
different Internet Connection/ISP?

Since we know our own IP range, we can easily set up our SPF records for our
domain name, but the client's SPF is where we're having trouble getting it
to work.


Mike

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com


-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

Hi Mike,

Assuming that you already have spf setup for your own domain and all
the clients use your server to send I would reference your domain's
spf records for each of your client's domains.

spf for: theirdomainname.com
"v=spf1 include:yourowndomain.com -all"


Regards

Bob
______________________________ Reply Separator _________________________________
Subject: RE: [spf-help] Adding SPF records to client's DNS
Author: "Mike Wagenti" <mike@vroooom.net> at Internet
Date: 10/2/2004 2:32 AM


Hello Bob,

Our clients relay email through our mail server. I have our mail server set
to use POP3 before SMTP, but I also want to be sure that we have the
client's SPF record set up properly, using the correct mechanism, (mx, a,
ptr,...) if necessary.

Thanks in advance,

Mike

-----Original Message-----
From: owner-spf-help@v2.listbox.com
[mailto:owner-spf-help@v2.listbox.com]On Behalf Of Bob Davis
Sent: Friday, October 01, 2004 12:11 PM
To: spf-help@v2.listbox.com
Subject: Re: [spf-help] Adding SPF records to client's DNS


Hi Mike,

Do your clients relay their outbound mail through your server, or do
they relay through their ISP's server?

Regards
Bob Davis
______________________________ Reply Separator
_________________________________
Subject: [spf-help] Adding SPF records to client's DNS
Author: "Mike Wagenti" <mike@vroooom.net> at Internet
Date: 10/1/2004 5:10 AM


If you're hosting multiple client's e-mail on a server and their MX record
is "mail.theirdomainname.com" and each client points to the same IP address
of the mail server, how do you properly create the SPF if the client uses a
different Internet Connection/ISP?

Since we know our own IP range, we can easily set up our SPF records for our
domain name, but the client's SPF is where we're having trouble getting it
to work.


Mike

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com


-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

Then the clients SPF record should have your IP in the SPF record.
Either you can add a host into their DNS like
mail-relay.clientdomain.com and then allow all A records or simply
create the ip4 record. If all outbound mail goes through your relay then
you don't even want their MX record listed. Your spf would look
something like: spf=v1 ip:pub.lic.ip -all

That's just off the top of my head..

-----Original Message-----
From: owner-spf-help@v2.listbox.com
[mailto:owner-spf-help@v2.listbox.com] On Behalf Of Mike Wagenti
Sent: Saturday, October 02, 2004 2:33 AM
To: spf-help@v2.listbox.com
Subject: RE: [spf-help] Adding SPF records to client's DNS

Hello Bob,

Our clients relay email through our mail server. I have our mail server
set to use POP3 before SMTP, but I also want to be sure that we have the
client's SPF record set up properly, using the correct mechanism, (mx,
a,
ptr,...) if necessary.

Thanks in advance,

Mike

-----Original Message-----
From: owner-spf-help@v2.listbox.com
[mailto:owner-spf-help@v2.listbox.com]On Behalf Of Bob Davis
Sent: Friday, October 01, 2004 12:11 PM
To: spf-help@v2.listbox.com
Subject: Re: [spf-help] Adding SPF records to client's DNS


Hi Mike,

Do your clients relay their outbound mail through your server, or
do
they relay through their ISP's server?

Regards
Bob Davis
______________________________ Reply Separator
_________________________________
Subject: [spf-help] Adding SPF records to client's DNS
Author: "Mike Wagenti" <mike@vroooom.net> at Internet
Date: 10/1/2004 5:10 AM


If you're hosting multiple client's e-mail on a server and their MX
record is "mail.theirdomainname.com" and each client points to the same
IP address of the mail server, how do you properly create the SPF if the
client uses a different Internet Connection/ISP?

Since we know our own IP range, we can easily set up our SPF records for
our domain name, but the client's SPF is where we're having trouble
getting it to work.


Mike

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription, please go to
http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription, please go to
http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com


-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription, please go to
http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com


--------------------------------------------------------------------------------
This email is intended only for the named recipents. All email is monitored and archived for compliance requirements.
The views or context in this message may not reflect the view or context of the company.
--------------------------------------------------------------------------------



-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

All,

I have implemented the following record. I need a good understanding of what
this does. Also, I think the '?all' keeps it from being real and permits
logging. How do I change that if my logs are clear?

I am a small ISP and this one ms record is my outward looking mail server.


"v=spf1 a a:mail.me_a_isp.com mx: mail.me_a_isp.com ?all"

Should I implement SMTP auth? Does anyone have a good article or link?

Alex

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

On Sat, Oct 02, 2004 at 03:25:54PM -0400, Alex Redden wrote:
> I have implemented the following record. I need a good understanding of what
> this does. Also, I think the '?all' keeps it from being real and permits
> logging. How do I change that if my logs are clear?
>
> I am a small ISP and this one ms record is my outward looking mail server.
>
>
> "v=spf1 a a:mail.me_a_isp.com mx: mail.me_a_isp.com ?all"

http://spf.sonologic.nl/index.php?record=v%3Dspf1+a+a%3Amail.me_a_isp.com+mx%3A+mail.me_a_isp.com+%3Fall

There shouldn't be a space between mx: and the mail.me_a_isp.com. If you
want to get a good understanding about what the record does, read
http://spf.pobox.com/mechanisms.html, also check out
http://spf.pobox.com/faq.html

> Should I implement SMTP auth? Does anyone have a good article or link?

Read your MTA's manual, if that doesn't help ask on your mta's help
mailing list.

Koen

--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com