Home > Ask the Microsoft Exchange Experts > Richard Luckett: Spam and Security Questions & Answers > Locate 'missing' SPF record on an external DNS domain
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

Locate 'missing' SPF record on an external DNS domain

Richard Luckett EXPERT RESPONSE FROM: Richard Luckett

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site


Exchange Server tips, tutorials and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 19 September 2007
I'm running Exchange Server 2003 Service Pack 2 Enterprise Edition on Windows 2003 Service Pack 1 Standard Edition. I ran a domain name system (DNS) report on my registered domain through www.dnsstuff.com, and it indicates that I don't have a Sender Policy Framework (SPF) record set up for the mail server.

To the best of my knowledge, I created an SPF record using Microsoft's Sender ID Framework SPF Record Wizard and saved the file. However, I am not sure where it should be set as far as DNS goes -- internal to our network or external to the registrar?



Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


RELATED CONTENT
Microsoft Exchange Server and DNS
Exchange Server 2003 collects email from only specific POP3 domains
Configure BES to direct email from a new domain email address
Why can't POP3 clients receive Exchange Server email?
How to configure DNS records for Exchange Server on Windows SBS 2003
OWA stops working from external network connection
Receiving 'failed MX lookup' delivery status notification
IP address changes for an Exchange 2000 recovery server
0xC103FC93 error with Exchange 2003 setup and install
Set up FQDN and bridgeheads for POP3 and IMAP4 email
Reverse DNS mismatches mark Exchange email as spam

Antispam Software and Spam Filtering
Problems with email spoofing on SBS 2003
Exchange Insider e-zine
Securing your Exchange Server 2007 journaling archives
Microsoft Exchange Server security dos and don'ts
Troubleshooting Microsoft Exchange Server Event ID error 6009
How can I configure Exchange IMF to allow an IP address or DNS?
Tool helps identify inbound Exchange Server email flow issues
Exchange email sent to a domain using SPF authentication is returned
Configure SMTP relay restrictions in Exchange Server 2003 to stop spam
Secure Edge Transport servers using the Security Configuration Wizard
Antispam Software and Spam Filtering Research

Richard Luckett: Spam and Security
How effective is tracking the IP address of an email hacker?
Why can't I grant users permissions to an Exchange public folder?
How can I configure Exchange IMF to allow an IP address or DNS?
Tool helps identify inbound Exchange Server email flow issues
Configure SMTP relay restrictions in Exchange Server 2003 to stop spam
How to lock down an SMTP relay to prevent spam in Exchange Server 2003
Connecting an Apple iPhone to Exchange Server on Windows SBS 2003
Why does a security alert pop up when accessing Outlook Web Access?
Exchange email sent to a domain using SPF authentication is returned
Selectively set email permissions for Exchange groups

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
greylist  (SearchExchange.com)
hash buster  (SearchExchange.com)
image spam  (SearchExchange.com)
KnujOn  (SearchExchange.com)
Sender ID  (SearchExchange.com)
spam confidence level  (SearchExchange.com)
spamblock  (SearchExchange.com)
spim  (SearchExchange.com)
tarpitting  (SearchExchange.com)
teergrube  (SearchExchange.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


It can be tricky at times to understand SPF and the SPF Record Wizard doesn't specifically say "external." It can also be confusing because you are publishing the internal mail servers that you host in your organization that send and receive email, so it's hard to know what addresses to publish. However, in a way, you were able to answer your own question. By going to www.dnsstuff.com you were querying you public (external) DNS.

The SPF record, just like your MX record, is used primarily by external messaging systems trying to send you email. You will need to have the SPF record added to your external DNS domain/zone in order for them to see and use it.

Check out "Implementation tips for the Sender ID Framework -- Creating your SPF record" for an updated guide from Microsoft on creating and using SPF records.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

  • Tip: How defective DNS records damage Sender ID and Exchange Server
  • Tip: Online tool simplifies creation of SPF domain records
  • Tip: Common DNS issues that affect Exchange Server
  • Tutorial: A primer on DNS and MX records
  • Reference Center: Exchange Server and DNS tips and resources

    		•



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Outlook Web Access (OWA) Tips and Advice
    HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy     		  TechTarget - The IT Media ROI Experts