Using SPF & Domain Keys for Email Security

• Posted by admin
• 06 May 2009
• PRO-Webs Customers

Created in 2003 SPF is an acronym for Sender Policy Framework, which is an attempt to control forged emails. SPF is not directly about stopping spam, but rather about giving domain owners a way to say which DNS email sources are legitimate for their domain and which ones aren't.

DomainKeys is an email authentication system that allows for incoming mail to be checked against the server it was sent from to verify that the email has not been modified. This ensures that messages are actually coming from the listed sender (domain) and allows abusive messages to be tracked with more effectively.

How to Set Up your Email Authentication

1. Login to your PRO-Webs hosting control panel.

2. In the "Mail" section locate the "Email Authentication" icon

3. Once inside the Email Authentication screen you will see the Domain Keys and SPF settings.

4. To enable your Domain Keys, simply click enable.

5. To enable your SPF record in its basic settings, click enable.

Additional Advanced SPF Options Include:

Additional Hosts that send mail for your domains (A): All the hosts you specify here will be approved for sending mail. You do not need to specify your primary mail exchanger or any server that an mx has been created for as they are already included automatically.

Additional MX servers for your domains (MX): All the mx entries for every domain you specify here will be approved for sending mail.

Additional Ip blocks for your domains (IP4): All the ip blocks you specify here will be approved for sending mail. Blocks should be specified in CIDR format (ie 127.0.0.1/32). The main server interface ip cannot be removed from this list if it is present.

Include List (INCLUDE): The SPF settings for all hosts your specify in this list will be included with your SPF settings. This is useful if you will be sending mail though another service (ex. mac.com, comcast.com, etc).

All Entry (ALL): If you are sure you have entered all hosts (your primary mail exchanger and any other mx entries are automatically included) that will send mail for your domain, check this box to exclude all other domains.

Overwrite Existing Entries: Check yes to overwrite.

Save Your Changes: Click Update.

Most customers will only have any use for steps 1-5 and you are not advised to make advanced changes without adequate DNS and email knowledge.