Sender Policy Framework (SPF)

In order to help others identify legitimate email from us (and the domains we serve), we have implemented the Sender Policy Framework (SPF).

This protocol (currently an Internet Draft, moving to becoming an RFC) allows domain owners to specify the hosts from which mail may originate by way of the DNS system. We have published SPF records for all our servers and domains. This protects other domains (that check SPF records) from accepting mail which claims to be from us but really isn't.

In order to protect ourselves from fake email, our email servers check the SPF records of all email senders. If the host the email originates from is not identified as a legitimate source for that domain, the message will be rejected. One of the benefits of publishing SPF records is that we use the SPF system as a "free pass". The DNSBL and ORDB lists are not checked if the sender is listed as authorized for the domain. If your message is being rejected by one of these lists, contact your ISP or DNS provider and ask them to publish SPF records for your host. The SPF people have created a wizard to help in the process.

Since SPF has a potential "hole" which could allow spammers to select the entire internet as valid senders, we maintain a local list of domain names that we will not accept mail from, even if the SPF records say it's from a valid sender. You can query our SPF DENY database to see if your domain is listed:

Domain:  

If you are listed in the SPF DENY database, we have received UCE/SPAM from the legitimate servers for the domain, and you need to contact your ISP and have them clean out the individuals responsible for those messages. Once they are gone, have them contact us at dnsbl at invlogic.com and we'll consider removing the domain.

For the complete story on how we handle email, click here.


LinuxHQLinux Online Copyright ©1995-2008, Innovative Logic Corp,
Design by: Innovative Web Communications.
All rights reserved.