SPF Record Setup for AppRiver Hosted Services

DNS

Sender Policy Framework (SPF) allows the domain owner to specify their mail sending policy, i.e., which mail servers are used to send mail from their domain. This technology requires both the sending and receiving server to work together.

The sending server specifies the locations mail should be coming from with the SPF record. The SPF record is usually published by the domain owner in the domain's DNS zone file (the SPF record may be listed as a TXT record in some DNS zones). Hard fail or soft fail is also specified in the SPF record with -all or ~all. When using hard fail (-all), messages from senders not listed in your SPF record should be treated as unauthorized. When using soft fail (~all), messages from senders not listed in your SPF record should be treated as suspicious.

The receiving server determines if messages comply with the domain's stated policy by checking the domain's SPF record. For example, a sender would be considered unauthorized or suspicious if the sending server is not listed in the domain's SPF record.

How to Configure an SPF Record for Your Domain:

1. If you are using AppRiver's SmartHosting service, please use one of the following SPF records. The first record is for hard fail (-all) and the second record is for soft fail (~all).

v=spf1 include:appriver.com -all

v=spf1 include:appriver.com ~all


2. If all of your mail is hosted by AppRiver, please use the following SPF record:

v=spf1 include:exghost.com include:appriver.com -all


3. If you are using our Hosted Exchange service and a split domain and your other mail goes to a non-AppRiver server, you may use the following record. (You need to replace "mail.yourdomain.com" with your server name)

v=spf1 a:mail.yourdomain.com include:exghost.com include:appriver.com ~all


4. If you run your own mail server, we recommend adding one of the following SPF records: (You need to replace 1.2.3.4 or "mail.yourdomain.com" with your IP address or server name)

v=spf1 ip4:1.2.3.4 ~all

v=spf1 a:mail.yourdomain.com ~all


5. If your domain sends mail from multiple locations you might need to update your existing SPF record. You can add additional locations to your SPF record by using "include:" For example, if your domain is hosted on Office 365 and you are adding Smarthosting, you would need to add "include:appriver.com" to your existing Office 365 SPF record.

The Office 365 SPF record looks like the following record:

v=spf1 include:spf.protection.outlook.com -all

To include Smarthosting you will update your SPF record to the following record:

v=spf1 include:appriver.com include:spf.protection.outlook.com -all