If you set the SPF record for your domain and you send your emails through the server smtp.forpsi.com, please, add into your SPF record this item:
Illustrated instruction of setting the SPF and DMARC records
1. Login with your credentials of your customer account on admin.forpsi.com.
2. Click on the "Domains" link
3. Click on the domain name
4. Click on the "edit DNS records" link (if this button is missing, you don't use our NS servers and you have to set these TXT records on your NS servers)
5. Add the SPF record as a TXT record for the domain, the value can be v=spf1 a mx include:_spf.forpsi.com -all
5. Add the DMARC record as a TXT record with the hostname _dmarc, its value can be v=DMARC1; p=none. If you set the DMARC record to secure you domain against abusing in spams or fraudulent emails, we recommend policy reject, e.g. the value v=DMARC1; p=reject.
SPF records of external services
If you send emails through the smtp server of your ISP, from internal system, or you are using some marketing services, it is neccessary to allow also IPs of these services. Because every domain can have set only one SPF record, you have to add items of external services into the existing SPF record. It can be
An IP address "ip4:XXX.XXX.XXX.XXX", resp. ip6, or a range of IP addresses "ip4:XXX.XXX.XXX.XXX/24", resp. ip6.
An item of external service, see samples bellow
- Office365: "include:spf.protection.outlook.com"
- Shoptet: "include:_spf.myshoptet.com"
- Mailchimp: "include:servers.mcsv.net"
Add the items into your SPF record, see sample
v=spf1 a mx include:_spf.forpsi.com include:spf.protection.outlook.com ~all
Qualifiers - determine proccessing your emails
The mechanism and qualifiers all allow you to determine, how the emails, that do not correspond with allowed IP address, will be processed.
"-" Fail - the emails from disallowed IPs should be rejected.
"~" Softfail - typically, messages that return a Softfail are accepted but tagged.
In the sample "v=spf1 a mx include:_spf.forpsi.com ~all", the qualifier Softfail is used. Emails sent via our mailservers match the SPF test. Emails sent via other mailservers (e.g. SMTP server of the ISP) don't match the SPF test, but will be accepted.
If you choose the qulifier Fail (-all), sample "v=spf1 a mx include:_spf.forpsi.com -all", not matched emails will be rejected. Choose this qualifier, if you exactly know, which servers you use to send your emails and if you want to secure your domain against abusing in spams.