Sender Policy Framework (SPF) is an email authentication standard that helps protect senders and recipients from spam, spoofing, and phishing. SPF defines a way for receiving mail servers to verify that a message came from an authorized sending server, which helps detect forgery. This article shows you how to add an SPF record for domains hosted on the OpenSRS email platform and lists the sending hosts and IP ranges you may need to authorize.
About the SPF record
The OpenSRS email platform delivers mail through two clusters, Cluster A and Cluster B. For more detail, see the article on the email clusters.
Because mail can be sent from either cluster, include _spf.hostedemail.com in your SPF record. A minimal record looks like this:
v=spf1 include:_spf.hostedemail.com ~all
Tip: To build or validate an SPF record, you can use third-party tools such as the SPF creation wizard or the SPF record testing tools.
Add an SPF record with SystemDNS nameservers
If your domain uses the OpenSRS systemdns.com nameservers, add the SPF record as a TXT record on the root of the domain.
- Log in to the Reseller Control Panel (RCP).
- Enter the domain name in the search field and click Search.
- Click the domain name in the search results.
- In the DNS section, click Edit.
- Select TXT from the add-record drop-down menu.
- Enter your SPF record in the text field, for example v=spf1 include:_spf.hostedemail.com ~all.
- Click Save DNS settings.
Email notifications to registrants
OpenSRS uses the reseller technical contact address as the From address for messages sent to registrants. To make sure those messages are delivered, include registrarmail.net in the SPF record of the domain configured as your reseller account's technical email address.
include:registrarmail.net
Hosted email IP addresses
If you need to authorize specific IP ranges rather than the include mechanism, use the addresses below for the cluster that serves your account.
Cluster A IP addresses
Traffic type | IP addresses |
|---|---|
Outbound email (regular and filter-only deliveries) | 64.99.140.1/24, 216.40.44.0/24 |
Outbound forward and autoresponder traffic | 64.99.140.10/32, 216.40.42.17 |
Migration traffic | 64.99.140.16/29, 216.40.42.15 |
Cluster B IP addresses
Traffic type | IP addresses |
|---|---|
Outbound email (regular and filter-only deliveries) | 64.98.42.0/24 |
Outbound forward and autoresponder traffic | 64.98.36.17 (with matching forward and reverse DNS to forward.b.hostedemail.com) |
Migration traffic | 64.98.36.15 (fetchmail-snat.b.hostedemail.com) |
Next steps
- Set up DKIM. Pair SPF with DKIM signing by following Setting Up DKIM for Hosted Email Domains.
- Configure outbound notice records. If you send automated reseller notices, see Configuring Records for Automated Outbound Email Delivery.
- Add a TXT record. For general guidance on creating TXT records in the Control Panel, see the TXT record article.
Questions? Contact OpenSRS Support.
How helpful was this article?
Thanks for your feedback!
Do you still need help? If so please submit a request here.