How important is sender validation, and what matters?

Posted by Charles Stewart on Server Fault See other posts from Server Fault or by Charles Stewart
Published on 2010-04-14T12:15:33Z Indexed on 2010/04/14 12:23 UTC
Read the original article Hit count: 395

Filed under:

spf

|

dkim

|

best-practices

|

email

|

authentication

When I started learning how to configure email, SPF existed but there were doubts about whether it was a good thing, and the value of offering SPF records in DNS. Now it seems that it is widely accepted that some form of well-known sender validation is good practice.

Is this really true? Am I being a bad postmaster by not supporting SPF/DKIM/whatever?

© Server Fault or respective owner

Related posts about spf

Office365 SPF record has too many lookups

as seen on Server Fault - Search for 'Server Fault'
For some utterly ridiculous administrative reasons we've got a split domain with one mailbox on Office365 which requires us to add include:outlook.com to our SPF record. The problem with this is that that rule alone requires nine DNS lookups of the maximum of 10. Seriously, it's horrible. Just look… >>> More
TinyDNS and proper settings for SPF records

as seen on Server Fault - Search for 'Server Fault'
I've inherited a TinyDNS configuration that have following entries for SPF: @domain.com:x.x.x.3:a::86400 @domain.com:x.x.x.103:c:10:86400 =domain.com:x.x.x.3:86400 =mail.domain.com:x.x.x.3:86400 =mail.domain.com:x.x.x.103:86400 'domain.com:v=spf1 ip4\072x.x.x.3 ip4\07231.130.96.103 ptr\072mail… >>> More
How to set up spf records to send mail from google hosted apps to gmail addresses

as seen on Server Fault - Search for 'Server Fault'
Hi there, I'm trying to work out why email I send from one domain I own is rejected by another that I own, and while I think it may be related to how I've setup spf records, I'm not sure what steps I need to take to fix it. Here's the error message I receive: Technical details of permanent failure: Google… >>> More
SMTP server on Win2008, SPF ecc

as seen on Server Fault - Search for 'Server Fault'
I want be able to send outgoing email from my website. I want to setup Win2008 smtp to be able to send them respecting all the spam rules. My checklist is: the smtp should be able to accept outgoing email only from internal sites: I will limit it to relay only 127.0.0.1 is this correct? it should… >>> More
Configure a SPF rule on Ubuntu

as seen on Server Fault - Search for 'Server Fault'
Where I can create/insert the SPF rules to allow a external server to authenticate and send e-mails using the domain name of my server running Ubuntu? I need to insert this rule: v=spf1 ip4:111.111.111.111/29 ip4:111.111.111.111/24 a mx ~all Thanks :) >>> More

Related posts about dkim

DKIM error: dkim=neutral (bad version) header.i=

as seen on Server Fault - Search for 'Server Fault'
Ive been struggling the last couple of hours with setting up DKIM on my Postfix/CentOS 5.3 server. It finally sends and signs the emails, but apparently Google still does not like it. The errors I'm getting are: dkim=neutral (bad version) [email protected] from googles "show original"… >>> More
DKIM passes everywhere apart from Yahoo!

as seen on Server Fault - Search for 'Server Fault'
Hi, I'm using dkim-milter, Postfix on Ubuntu (I think I used these instructions for setting up). Anyway, using the reflectors such as Port25, BlackOps and Altn.com I get passes for DKIM: X-DKIM: OpenDKIM Filter v2.0.1 medusa.blackops.org o2SGTMSg005616 Authentication-Results: medusa.blackops.org;… >>> More
Debian Unstable + Postfix 2.6.5 + dkim-filter 2.8.2 issue

as seen on Server Fault - Search for 'Server Fault'
I have Postfix installed on Debian Unstable, as the title states, the system is completely up-to-date, I have tried to get DKIM signatures working on outgoing mail using dkim-filter 2.8.2. I couldn't use the default Debian way of doing things with sockets, instead I used the Ubuntu way: SOCKET="inet:12345@localhost"` I… >>> More
Getting Exchange to do DKIM

as seen on Server Fault - Search for 'Server Fault'
Having read Jeff's blog post about Email and DKIM, I'm thinking it might be good to DKIM all mail coming out of our Exchange 2003 servers. Whats a good way of going about that? >>> More
DKIM, SPF, PTR records are not working properly with my domain

as seen on Server Fault - Search for 'Server Fault'
I configured my server and well authenticate email system with DKIM key, SPF record and PTR records, when i start to sent out mails from phplist interface to my users ~50000, my domain is spammed by google. In headers, signed by and mailed by tag shows by my domain : appmail.co, I also test my domain… >>> More