Free Tools for IT Administrators

RBL Lookup
   
Enter domain name or IP addresses to lookup in the RBLs

Read more...

PTR Check
Enter a domain name or IP address to lookup reverse PTR record

Read more...

Mail Server Configuration Check
Enter a domain name to perform a series of tests to determine if DNS, PTR, MX records are setup correctly and domain is not black listed in an RBL

Read more...

Mail Server Availibility Check
Enter domain name to check if the mail server is accepting e-mails and point out issues that could cause email delivery from the internet

Read more...

MX Check
Enter a domain name or IP address to lookup MX records

Read more...

SPF Check
Enter a domain name to lookup SPF record

Read more...

Name Servers Lookup
Enter domain name for DNS Servers lookup

Read more...

Whois Info
Enter a domain name to lookup registration information

Read more...

IP to Country lookup
Enter an IP address to find its country location

Read more...

Ping
Enter an IP address to use to see the ping response

Read more...

Tracert
Enter an IP address or hostname to use to see the trace command response

Read more...

IP v6 to IP v4 converter
Enter an IP v6 address to convert to IP v4 equivalent

Read more...

IP v4 to IP v6 converter
Enter an IP v4 address to convert to IP v6 equivalent

Read more...

Your IP : 38.107.191.107  

SPF Check

Enter a domain name to lookup SPF record

Sender Policy Framework

Register Now

Sender Policy Framework (SPF) tackles email address forgery. Without SPF it is very easy to send e-mails using someone else's email address. Often you get spam from yourself - this is because the spammer puts your e-mail address as the sender.

In order for SPF to work you need to publish a list of IP addresses that are used to send e-mails to other users on the Internet. When you send an email to someone else on the Internet your SMTP server connects to the recipient’s SMTP server, which knows the IP address of your SMTP server. The recipient’s server can compare this IP with the published records in the DNS for your domain. This is how the recipient's server can find out if the email was sent by your server or someone posing to be a user on your domain.

Does SPF stop spam?

SPF can stop spam to a certain extent. Although spammers can still send you unwanted e-mails, they will be forced to use their own domain. SPF can effectively stop viruses or worms from an infected machine that send out thousands of message to everyone found in your address book.

How do I publish my IP Addresses?

Follow the steps below to publish SPF records.

  • Gather the list of IP addresses that you know can send email to the Internet from your organization
  • Use this wizard to create an SPF entry for your DNS
  • Update your DNS with the string created by the wizard

Once your DNS contains necessary SPF constructs, any server can query it to find out what IP addresses should your email come from.

Example

For the purpose of this example let us assume the following is true.

Your domain name is mydomain.com
Your e-mail is handled by: 199.199.199.1
There are 2 MX records defined in the DNS 199.199.199.2
Your web address is: 199.199.199.3
This refers to your A record 199.199.199.4
Other SMTP servers on your network: 199.199.199.5
No other servers are used to send out e-mails for "mydomain.com"  


You can enter the following SPF record, which is a TXT record in the DNS like:

"v=spf1 a mx ip4:199.199.199.5 ip4:199.199.199.6 -all"

This entry tells the recipients SMTP server that an email where the sender's address contains "mydomain.com" can only come from certain IP addresses. If any other IP address is used to send message the recipient can reject it.

Each element in the SPF string is separated by a white space. The table below explains what each entry means.

v=spf1 This is the version of SPF
a Signifies that email can come from any IP address listed as an A record in the DNS
mx Signifies that email can come from any IP address listed as an MX record in the DNS
ip4:199.199.199.5 Email can also come from these IP addresses
-all This means that email can only come from these IP address. If any other IP address is used the recipient should reject it. Click here for other possible values for this field.

Latest Blog Articles


Martuz.cn / Gumblar Recently there has been a rash of infection of MS Outlook Web access (OWA) by Martuz.cn / Gumblar virus. Our Analyses showed that OWA was running an infected java script within the OWA pages.This Java Script virus causes OWA to perform sluggishly. Click here to find out how to remove the infected Java Script....

Read More Articles