Sender Policy Framework (SPF)

The Sender Policy Framework (SPF) is a way to try and combat junk (spam) email on the Internet by defining who is allowed to send mail on behalf of a domain.

If you have a domain hosted with Verrotech you may want to use SPF in one of two ways.

1 – Use a Third-Party Email Provider (gSuite, Office 365, etc)

If you use a third-party email provider to send and receive your email then we can configure your domain to make them a “trusted sender”. You can find the settings yourself and let us know, or just tell us which provider you’re with. Either way just contact support.

2 – Use Verrotech to Send and Receive Email

If you use the Verrotech mail system to send mail then we may have already configured SPF. If you’re not sure or need to ensure it’s enabled then contact support.

Note: If you send through Verrotech but we don’t manage your domain (the DNS) then you’ll need to add Verrotech to any SPF record you have. You can do this by including _spf.verrotech.com in your SPF directive.

Don’t Forget…

You may well actually send mail from a few different places – do you for example use MailChimp or a similar bulk sending service? Have a website form that sends mail or a notification system? Ideally all these will be listed in the SPF.

Mailing from Hosting Servers

A lot of the applications customers install (such as wordpress, drupal, phpBB, and so on) send emails as part of their operation – emails to the customer (“a new user has registered”) and also emails to the users who register (“confirm your account”, “a new item has been posted”). A potential issue with these are that services can easily categorise this sort of mail as spam – very commonly the sender details aren’t setup correctly (mail comes from “wordpress@localhost” or similar) or they’re very sparse or dubious in nature.

Likewise such services can be used to spam indirectly – if I register on a site using your email address you’re going to get a unwanted (spam) message about registering on the site.

In the past that just meant the email would more likely be in your spam folder but more commonly now email providers take steps to stop this at the network level, and there are even coordinated efforts to block some servers from sendmail mail (blacklists). Obviously Verrotech work hard to keep our systems off such blacklists and as such don’t support or allow the bulk/common sending of unauthenticated email from our hosting servers (sending of mail is what our mail servers are for!). We don’t say no totally because it’s always possible you may want to send a couple of legitimate messages.

However – customers using applications that send mail on a regular basis should really configure these to send mail through an SMTP relay host, be that Verrotech’s mail servers if you have mail support or, more likely, a third party such as gMail. There are plenty of guides available online on how to do so.

Using an SMTP relay will not only mean your mails get through and don’t fall foul of our protections, but also they are more likely to appear in your users inboxes and not get categorised as spam.

Any problems with this feel free to contact support.

 

Why IMAP?

We strongly recommend all our customers to use IMAP over POP.

IMAP is newer and faster! The other advantage is that message status (which ones are read, unread, replied to, etc) is stored on the server so will be the same on all your clients (mail on your desktop, mobile, etc).

You can also use folders on IMAP to sort and manage your mail (folders which if anything happens to your computer are stored safely on the server). You can also save your sent mail in IMAP as well.

IMAP offers many advantages over POP, though we have no plans to phase out our POP service.