SPF Records, cannot create them

[jake66]

I'm trying to create an SPF record at openspf.org, but after the entry:
"You can describe them by giving "arguments" to the a:, mx:, ip4:, and ptr: mechanisms. mx: takes domain names and approves all the MX servers of these domains. To keep the wizard short we left out ptr:, but it works analogously."

...it makes no sense to me. I do not know what to put in any of the boxes after this and my host will not do it for me.

The topics of other people with the same difficulties on the web all direct the user to "search" for the answer as it has been answered before, but I've not been able to spot any?

Can somebody explain to me (in dummy terms) what exactly I should put in these boxes, if anything?

[bill]

That site's descriptions can be pretty confusing. I just looked at it again, and now I'm confused again. ;)

Basically you need to know where you're sending mail from. Then you include those servers.

If your domain only sends mail through the MX server then your record could be as simple as this:

v=spf1 mx ~all

If your webserver also sends mail (from your website) the you could use something like this:

v=spf1 a mx ~all

The key is to know where your mail is being sent from. In most cases that's the MX server listed in your URL's DNS. However, if you're using 3rd party webmail and other services to send mail then it gets slightly more complicated.

For example, if you use Google Apps for Your Domain, and you only send mail through their servers then the resulting SPF record will be:

v=spf1 include:aspmx.googlemail.com ~all

You could skip all of the fields in that wizard and just fill in the include: field.

I've never used ip4 or ptr in my SFP records.

You can test out SPF records with a number of SPF validator [google.com] tools. Just enter the prospective SPF record and test it using the IP addresses you use to send your mail.

[jake66]

Thanks for replying :)

If your domain only sends mail through the MX server .... If your webserver also sends mail (from your website)..

That's a bit confusing for me :)

If I can explan how I send mail, maybe you could tell me what to enter / leave alone?

I send mail through thunderbird and sometimes cpanel's squirrelmail. All mail sent through my website is my @mydomain.com - I do not use my ISP's in or outgoing servers for anything.

The "host" name of my website is host.mydomain.com - do I need to specify this anywhere on openspf?

You could skip all of the fields in that wizard and just fill in the include: field.

Skip the first checkboxes too? What do I put in the include: field?

I'm deathly afraid of crippling my website's ability to send mail, so I want to make sure I get this right the first time... please forgive the novice questions!

[bill]

I send mail through thunderbird and sometimes cpanel's squirrelmail. All mail sent through my website is my @mydomain.com

You're using the POP3 server for Thunderbird? That would apply to your MX record. Check the MX radio button "yes" for that one.

The Squirrelmail is webmail. You'll need to add that host name to the include: field (ex. webmail.example.com)

Does your website have a form that uses sendmail or something similar to send mail to you or customers? If so, then you could add that server's hostname to the a: field. OR if that server's hostname resolves to the IP address listed next to the a radio button then you could just check "yes" for that.

Before applying the SPF record you can test it using the validators I linked to above. SPF is still more of a suggestion rather than a rule, so you won't cripple your mail.