Problems with spoof, SPF

If you are getting tons of spam return-messages (like Failure Notification or Mailer Daemon)...THIS IS SPOOF

Partial solution: Enable Default Address and set every catchall to :fail: no such address here. This will stop you from getting the bounce-backs, but the real problem may not be solved.

Full solution: You need to create an SPF record. An SPF record is an entry added to the DNS zones for a domain. This record verifies that a user has permission to send mail from that domain. This is used to prevent spoofing for your domain.

Notice: Osirion automatically creates an SPF record for all shared and reseller customers. You can check the existence of your SPF record at nwtools.com by selecting the DNS Records search and submitting your domain name. Then look for a TXT record with "v=spf1 ..." as the value.

How to create an SPF record via cPanel.

1. Login to your cPanel and click the "Advanced DNS Zone Editor" icon. (If you do not have this icon, you cannot create this record via cPanel. Contact Osirion to request this icon.)
2. Select the desired domain name from the drop-down.
3. Under "Add a Record", enter this information:
   • Name: type your domain name (without the www)
   • TTL: 14400
   • Type: TXT
   • Address: you need to create this special code, or use an SPF wizard to generate the code
4. Click the "Add Record" button.

How to create an SPF record via WHM.

1. Login to your WHM and click the "Edit DNS Zone" link. (Under DNS Functions.)
2. Select the desired domain name from the "Choose a Zone to Edit" list.
3. Under "Add New Entries Below this Line", enter this information:
   • In the first blank: type your domain name (without the www), then add an extra dot at the end [example: osirion.co.za. ]. (It is extremely important to include a trailing dot at the end of your domain, or you may break your DNS.)
   • Do NOT change the 14400 part.
   • In the "Select" drop-down: choose TXT
   • In the "Text Information" box: you need to create this special code, or use an SPF wizard to generate the code
4. Click the "Save" button at the very bottom of the page.

You also need to know...

SPF records only work if your mail service bothers to authenticate outgoing emails.

Anyone who uses a mail server which does not respect SPF record will be able to send spoof emails. Currently, the SPF record is widely used by popular hosting and email companies. (Especially Osirion, Google/Gmail, Yahoo, Hotmail, etc.)