P
Peter J. Walker
Guest
Hi,
I am new to Plesk 8.6 which is running on a Suse Linux server. I am no expert, just trying to get everything running properly. I do not have a licence for SpamAssassin installed (costs extra).
I have a number of domains on my server and I want to setup my SPF record correctly. Here is what I have done so far and unfortunately it does not seem to be working. I hope someone can tell me what to do to get this up and running properly as I get a lot of spam on one of my accounts. I use Spam Arrest to kill my incoming spam. However as a lot of the incoming spam is declared as coming from my own Email addresses, I am hoping the SPF record can help to stop that. I have also had spammers using my domain name to send out spam to others (however NOT from my server).
Anyway, this is what I have done so far (I have substituted mydomain.com for the real domain name):
1. Used http://old.openspf.org/wizard.html to create a suitable SPF entry.
2. Entry supplied was: "v=spf1 a mx include:ispdomain.com include:spamarrest.com ~all"
3. In Plesk 8.6, I went to Domains / mydomain.com / DNS Settings
4. Clicked on "Add Record"
5. Record type: TXT
6. Enter domain name: mail (.mydomain.com was already there)
7. Enter TXT record: v=spf1 a mx include:ispdomain.com include:spamarrest.com ~all
8. OK
9. Then clicked on the Update button to update the DNS records.
I also made the following additional settings:
Under Server / Mail
DomainKeys spam protection
Allow signing outgoing mail = On
Verify incoming mail = On
Switch on SPF spam protection
SPF checking mode: Reject mails when SPF resolves to "fail" (deny)
SPF local rules: include:spf.trusted-forwarder.org
SPF guess rules: a/24 mx/24 ptr
SPF explanation text: Your message was identified as Spam. If this is wrong please contact us directly
Switch on spam protection based on DNS blackhole lists
DNS zones for DNSBL service: sbl.spamhaus.org
Under Domains / mydomain.com / Mail
"Use DomainKeys spam protection system to sign outgoing e-mail messages" = On
-----
After all that, DomainKeys and SPF should now be set and operating for mydomain.com, but that does not appear to be the case.
Using Outlook 2003, I sent myself the Microsoft test mail (Tools / E-mail accounts, etc. "Test Account Settings")
The header of that Email contains the following entries:
DomainKey-Status: no signature
Received-SPF: none(mydomain.com: mydomain.com does not designate permitted sender hosts)
I used http://www.politemail.com/check-spf.aspx to check my SPF and that also tells me I have no SPF record.
-----------
My DNS settings for mydomain.com are (xxx.xxx.xxx.198 is my server IP):
xxx.xxx.xxx.198 / 24 PTR mydomain.com.
_domainkey.mydomain.com. TXT o=-
default._domainkey.mydomain.com. TXT p=MHww..... ;
ftp.mydomain.com. CNAME mydomain.com.
mydomain.com. NS ns.mydomain.com.
mydomain.com. A xxx.xxx.xxx.198
mydomain.com. MX (10) mail.mydomain.com.
mail.mydomain.com. A xxx.xxx.xxx.198
mail.mydomain.com. TXT v=spf1 a mx include:ispdomain.com include:spamarrest.com ~all
ns.mydomain.com. A xxx.xxx.xxx.198
webmail.mydomain.com. A xxx.xxx.xxx.198
www.mydomain.com. CNAME mydomain.com.
---
Please tell me how to fix it all so that both Domain Keys and SPF works properly.
Regards
Peter
I am new to Plesk 8.6 which is running on a Suse Linux server. I am no expert, just trying to get everything running properly. I do not have a licence for SpamAssassin installed (costs extra).
I have a number of domains on my server and I want to setup my SPF record correctly. Here is what I have done so far and unfortunately it does not seem to be working. I hope someone can tell me what to do to get this up and running properly as I get a lot of spam on one of my accounts. I use Spam Arrest to kill my incoming spam. However as a lot of the incoming spam is declared as coming from my own Email addresses, I am hoping the SPF record can help to stop that. I have also had spammers using my domain name to send out spam to others (however NOT from my server).
Anyway, this is what I have done so far (I have substituted mydomain.com for the real domain name):
1. Used http://old.openspf.org/wizard.html to create a suitable SPF entry.
2. Entry supplied was: "v=spf1 a mx include:ispdomain.com include:spamarrest.com ~all"
3. In Plesk 8.6, I went to Domains / mydomain.com / DNS Settings
4. Clicked on "Add Record"
5. Record type: TXT
6. Enter domain name: mail (.mydomain.com was already there)
7. Enter TXT record: v=spf1 a mx include:ispdomain.com include:spamarrest.com ~all
8. OK
9. Then clicked on the Update button to update the DNS records.
I also made the following additional settings:
Under Server / Mail
DomainKeys spam protection
Allow signing outgoing mail = On
Verify incoming mail = On
Switch on SPF spam protection
SPF checking mode: Reject mails when SPF resolves to "fail" (deny)
SPF local rules: include:spf.trusted-forwarder.org
SPF guess rules: a/24 mx/24 ptr
SPF explanation text: Your message was identified as Spam. If this is wrong please contact us directly
Switch on spam protection based on DNS blackhole lists
DNS zones for DNSBL service: sbl.spamhaus.org
Under Domains / mydomain.com / Mail
"Use DomainKeys spam protection system to sign outgoing e-mail messages" = On
-----
After all that, DomainKeys and SPF should now be set and operating for mydomain.com, but that does not appear to be the case.
Using Outlook 2003, I sent myself the Microsoft test mail (Tools / E-mail accounts, etc. "Test Account Settings")
The header of that Email contains the following entries:
DomainKey-Status: no signature
Received-SPF: none(mydomain.com: mydomain.com does not designate permitted sender hosts)
I used http://www.politemail.com/check-spf.aspx to check my SPF and that also tells me I have no SPF record.
-----------
My DNS settings for mydomain.com are (xxx.xxx.xxx.198 is my server IP):
xxx.xxx.xxx.198 / 24 PTR mydomain.com.
_domainkey.mydomain.com. TXT o=-
default._domainkey.mydomain.com. TXT p=MHww..... ;
ftp.mydomain.com. CNAME mydomain.com.
mydomain.com. NS ns.mydomain.com.
mydomain.com. A xxx.xxx.xxx.198
mydomain.com. MX (10) mail.mydomain.com.
mail.mydomain.com. A xxx.xxx.xxx.198
mail.mydomain.com. TXT v=spf1 a mx include:ispdomain.com include:spamarrest.com ~all
ns.mydomain.com. A xxx.xxx.xxx.198
webmail.mydomain.com. A xxx.xxx.xxx.198
www.mydomain.com. CNAME mydomain.com.
---
Please tell me how to fix it all so that both Domain Keys and SPF works properly.
Regards
Peter