How to setup an SPF record (cPanel)

What is an SPF record?
A Sender Policy Framework (SPF) record is a type of Domain Name Service (DNS) TXT record that identifies which mail servers are permitted to send email on behalf of your domain. The purpose of an SPF record is to detect and prevent spammers from sending messages with forged “from” addresses on your domain. The symptoms of Email Spoofing include a large number of ‘Non-delivery Emails’ entering your inbox sporadically. These are emails that have been sent from another email address, but because the emails have had the ‘From’ address forged to look like your email address, any emails that have failed to be delivered will be delivered to your inbox.

 

This is quite common because the vast majority of ‘spoof’ emails are known to be spam by most email platforms, meaning most if not all mails will never be delivered to the intended recipient and will instead generate a ‘Non-delivery report’.

Adding an SPF record can help prevent others from spoofing your domain. For example, Office365 provides you with the record to add. You would then need to add it to your DNS zone.

The first step would be to login to your cPanel and select the “Zone Editor”

Click on “Manage” next to your domain name.  If you have multiple domains added to your hosting package then please ensure that you select the correct one before adding the DNS record.

You are now able to add a new record if one does not exist for it already or if one does exist, you can simply edit it.

“Name” should be the domain name.

You can keep the TTL (time to live) the same as the others that have already been created if you were not given one.

TXT Data is the “rule” that you wish to apply.

For example, if your organization uses only MS Office 365 and you do not have local mail servers, your SPF record should look like this:

If you are required to add an SPF record for a domain whose emails are being hosted here then this record can be used:

v=spf1 a mx include:relay.mailchannels.net  ?all

Please keep in mind that if the domain’s name servers are being pointed elsewhere, the update will need to be done on that system.

Was this answer helpful? 10 Users Found This Useful (0 Votes)