Thursday, February 2, 2012

Quick Tip: Getting Spiffy with SPF in RemoteManagement


Yesterday I was explaining how best to incorporate MailProtection's servers for your SPF records - which is very important to do when you are using it as the outbound smarthost for your (or your customer's) outbound mail.

But did you know you need to account for RemoteManagement in your SPF records as well?




The Reason:

The purpose of an SPF record is to have a record of all possible points of origin for your email - if the IP for a message from you is not on the list, there is a reasonable chance that it has been spoofed and can be classified as possible spam. While GFI Max RemoteManagement is not your messaging solution, it does send messages on your behalf in the form of alerts and reports once you configure the mail templates (If you haven't done this yet, I strongly recommend it). Without including the Max RM sending IP's, all of these alerts and reports will be considered of dubious origin.

The Solution:

You can add all of our individual network ranges to your SPF, but that's no fun at all. Just add the following to your SPF record right before the "all" statement:
a:maxmailers.gfi.com
UPDATE: with the change in company identity, these have been made more 'generic' as well as regional.

eu.mailers.system-monitor.com : EU (France, France1, Poland, Ireland, Europe)
uk.mailers.system-monitor.com : UK
us.mailers.system-monitor.com : US
au.mailers.system-monitor.com : AUS/NZ
hk.mailers.system-monitor.com : HongKong
de.mailers.system-monitor.com : Germany
 
The records in the SPF record would look as follow :



TXT records : "v=spf1 a:eu.mailers.system-monitor.com mx ~all"



The red text is our mailers in their SPF record.
...and you now have an always-updated inclusion of your RM alerts and reports.

Quick. Easy. Done.

3 comments:

  1. a:eumaxmailers.gfi.com
    a:demaxmailers.gfi.com
    a:ukmaxmailers.gfi.com
    a:usmaxmailers.gfi.com
    a:aumaxmailers.gfi.com
    a:hkmaxmailers.gfi.com

    ReplyDelete
    Replies
    1. Thank you Wybren!! Yes, due to the large number of instances and message world-wide, we have expanded/(narrowed?) our mailers for each region. thank you for the update.

      Delete