Overview of Sender Policy Framework (SPF)


Introduction

Any links or information in this article are merely provided as a convenience or informational resource. They do not imply nor represent an endorsement by Texas Tech University or its affiliates. For additional assistance, please contact the manufacturer/provider of the product/service or your preferred third-party support provider.

Explanation

Sender Policy Framework (SPF) is an email validation system designed to prevent spoofing of the sender's email address.

SPF allows email administrators the ability to specify which Internet hosts are allowed to send email claiming to originate from that domain. This is accomplished by creating an SPF entry in the domain's public DNS records. Mail exchangers on the Internet then use the SPF DNS record to verify a sender's identity against the list published by the email administrator.

The TechMail system uses SPF to reduce spoofing of @ttu.edu email addresses.

Below are some links to SPF information and resources for IT support personnel and email administrators:

Wikipedia article on SPFhttps://en.wikipedia.org/wiki/Sender_Policy_Framework
Free tool for checking a domain's SPF recordhttps://www.kitterman.com/spf/validate.html
Many valuable resources, including a wizard to help set up an SPF recordhttp://www.open-spf.org