Tuesday, January 31, 2012

Quick Tip: Easy SPF for Max MailProtection


While MailProtection provides quality IP reputation and filtering for your customers' outbound mail, managing the SPF records for those domains can be a bit tricky due to the number and occasional change of IP pools used. Nobody wants to go back and edit every domain's SPF records whenever the MailProtection IP pool changes or risk rejected mail for improperly entering a subnet.

I've done some digging, and you can use the following SPF entry for true "set it and forget it" SPF protection:

"v=spf1 ip4:1.2.3.4 include:smtproutes.com include:smtpout.com ~all"

...where "ip4:1.2.3.4 " is the IP address of your mail server. If you have other sending concerns to account for and have a more elaborate SPF record to maintain, the special sauce needed to cover MaxMail is the portion marked:

"include:smtproutes.com include:smtpout.com"
Add that portion to your SPF and worry no more about MailProtection and how it relates to your outbound mail's SPF.

1 comment:

  1. The IP's in the spf records contained in smtproutes.com and smtpout.com miss one of the IP ranges from GFI's support page: https://maxmail.gfi.com/support/content/spf/index.jsp?ctx=35505722:63:35505721:30:1350594212:70bce91ee8d4165ac6c974f41f4b1d491d716ceb
    (expand the "Can or should we establish SPF" section)

    The 94.186.161.0 / 255.255.255.0 range is not covered.

    ReplyDelete