SPF Record Configuration

The SPF (Sender Policy Framework) record is a fundamental element of your domain's security, authorizing servers permitted to send emails on your behalf. A correctly configured SPF record significantly increases the credibility of your emails and protects your brand.

In MessageFlow, the recommended and simplest method to ensure SPF compliance is by configuring a "Custom Return Path" (described in detail in the Domains Authorization). MessageFlow then automatically manages the SPF record for your dedicated return path subdomain.

However, if for any reason you wish to directly manage the SPF record for your main domain (or a subdomain used in your "From" address) via a TXT record, the following instructions will help you.

If Your Domain Does NOT Yet Have an SPF Record:

If your domain does not yet have a published SPF record, you will need to create one.

1

Log in to your domain's administration panel (where you manage its DNS zone).

2

Navigate to the DNS records management section.

3

Create a new TXT record for your domain (or subdomain, if you use it as your sending domain).

• Host/Name: Usually @ (for the main domain) or the subdomain name.

• Type: TXT

• Value/Data: Paste the following string: v=spf1 mx a include:_spf.messageflow.com ~all

This entry informs mail servers that your domain also uses servers indicated by MessageFlow (via the include:_spf.messageflow.com mechanism) to send emails. The mx and a mechanisms mean that mail servers defined in your domain's MX records and the server(s) corresponding to your domain's IP address (A record) are also authorized. The ~all (SoftFail) qualifier suggests that messages from other servers should be treated as potentially suspicious.

If Your Domain ALREADY Has an SPF Record for Another Service:

If your domain already has an SPF record configured because you use other services for sending email (e.g., a corporate system, another provider), you must update it by adding authorization for MessageFlow's servers. It is important that a domain has only one SPF record.

1

Log in to your domain's administration panel and navigate to the DNS records management section.

2

Locate the existing TXT record containing the SPF entry for your domain. It will start with v=spf1 ....

3

Modify the existing SPF record. Before the terminating mechanism (e.g., ~all, ?all, -all), add the following entry: include:_spf.messageflow.com

Example: If your existing SPF record looked like this: v=spf1 include:otherservice.com ~all After adding the entry for MessageFlow, it should look like this: v=spf1 include:otherservice.com include:_spf.messageflow.com ~all

This updated entry will extend the list of servers authorised to send emails on behalf of your domain, including both MessageFlow servers and the servers of services that were previously defined.

Remember that changes to DNS records may take time to propagate (from a few minutes to 48 hours).