Setting up an SPF Record

A Sender Policy Framework (SPF) record is used to list servers that are allowed to send email on behalf of a customer's domain. Some email security systems may check this record to ensure that incoming emails are not forged and malicious.

NetX often uses the email address associated with a user's account as the sending address when certain tasks are executed, such as sharing a collection or submitting a download request. If the customer has not authorized NetX's mail servers to send on behalf of their domain, emails sent from NetX could be blocked or rejected.

If you are having trouble receiving emails from NetX or seeing bounce messages from your mail server indicating that the sender is blocked, you might need to have your IT staff add an SPF record that effectively authorizes NetX's mail servers to send mail "from" your user's email addresses.

Configuring the SPF record

Please contact your organization's IT staff for assistance with configuring an SPF record. The process of configuring an SPF record is different depending on the domain registrar your organization is using. For example, here are the instructions for GoDaddyNamecheap1&1Network Solutions, and Google Domains.

If you've already set up an SPF record for another purpose, you can simply add a reference to NetX to it. The SPF specification requires that you only have one SPF record on your domain, if you have multiple records, it may cause issues, and cause rejections of your email.

For example, instead of having two separate records, such as:

v=spf1 include:_spf.google.com ~all
v=spf1 ip4:198.145.10.0/24 ~all

you can combine them into one, like this:

v=spf1 include:_spf.google.com ip4:198.145.10.0/24 ~all

Edit your domain's DNS settings to add a TXT record. The steps vary depending on your domain registrar. We recommend using the following SPF record:

v=spf1 ip4:198.145.10.0/24 ?all

You will need to add an SPF for the email domains you've configured in the following NetX properties. Changing these property values to a different domain will necessitate adding a new SPF record.

  • email.from
  • log.mail_from

If the number of senders in the TXT record exceeds 255 characters, you can use quotes to accommodate up to 4000 characters by breaking the values into strings of 255 characters or less. Enclose each string in double quotation marks (") using the following syntax: Domain name TXT "String 1" "String 2" "String 3"….."String N".

relay TXT 3600 "v=spf1 include:_netblocks.yourdomain.com include:_netblocks2.yourdomain.com include:_netblocks3.yourdomain.com ~all"
"spf2.0/pra include:spf1.anotherdomain.com include:spf2.anotherdomain.com include:anotherdomain.com -all"
"v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4NADCBiQKBgQDeIhtCv3vUinyhKiKtZ8efjHGGo8gE1T+o7gLrvo6yRtdz9ICe6Fz5sgz0WYFW5nCV4DmaTcS25TfgWKsL
Was this article helpful?
0 out of 0 found this helpful