 |
You are not logged in. Log in |
 |
Sender Policy Framework and Sender ID FAQsFrom $1Table of contents
About this DocumentThis document contains questions and terms related to email authentication. Frequently Asked Questions1. What Are Sender Policy Framework and Sender ID?SPF and Sender ID records are lists of IP addresses that are allowed to send email from your domain. These lists authenticate that email from your domain is really from you and help protect your brand by reducing the chance that your email is mistaken for spam. When an ISP receives an email from somebody@example.com via IP address 1.2.3.4, the ISP checks the SPF or Sender ID record at example.com. If 1.2.3.4 is on the list, the email is genuine. If not, the email may be a phish or spoof, and may be filtered, rejected, or discarded. 2. What Do Sender ID and SPF Records Look Like?An SPF or Sender ID record is a simple text (TXT) record placed in the DNS for a domain. An SPF record example: v=spf1 ip4:207.67.38.0/24 ip4:207.250.68.0/24 ip4:64.132.92.0/24 ip4:64.132.88.0/24 -all A Sender ID record example: spf2.0/pra ip4:207.67.38.0/24 ip4:207.250.68.0/24 ip4:64.132.92.0/24 ip4:64.132.88.0/24 -all 3. What Is the difference Between Sender ID and SPF?The spf1 and spf2.0 in the examples above demonstrate that Sender ID is "version 2" of SPF. 4. Why Does This Matter?ISPs use SPF and Sender ID when deciding which email to reject. By publishing a SPF or Sender ID record, you prove that you are not phishing or spoofing. Hotmail, in particular, is more likely to reject or silently discard your mail if you do not have an SPF or Sender ID record. Other ISPs also use the records, as do anti-spam and security systems used in corporate networks. 5. How Do I Create an SPF Record?If you use ExactTarget's Sender Authentication Package, you already use Sender ID and SPF.
6. How Do I Use the "All Mechanism"?Your Sender ID or SPF record must end with an all mechanism to indicate what to do with email that fails authentication. There are four all mechanisms: +all ("plus all" every email passes), ?all ("question all" failed message was a test message), ~all ("soft fail all"), and -all ("hard fail all"). 7.How Do I Test to Ensure My SPF or Sender ID Record Is Configured Properly?ExactTarget's free reputation reporting includes this information. Send a message to reputation@etdeliverability.com from within the application. Then, send a message to deliverability@exacttarget.com with the from line and subject line you used and ask for the reputation reporting results. Mention that you're testing Sender ID and SPF so the deliverability team can include feedback on any issues in the report. 8. Can You Manage This For Me?ExactTarget's Sender Authentication Package provides SPF and Sender ID, DomainKeys, DKIM authentication, and more. Contact your account manager for more information. GlossaryDomainKeys - an email authentication system. DomainKeys uses end-to-end verification of messages, allowing forwarded message to pass that would fail SPF or Sender ID authentication. Internet standards groups are working on specification for DomainKeys Identified Mail (DKIM). Email Authentication - a process that confirms that an email came from an IP address that is allowed to send email with its from domain. This process allows you to identify suspected forgeries, reject known forgeries, and block known spamming domains. You can also whitelist email from reputable domains and bypass certain types of filtering to minimize false positives. Internet Protocol (IP) Address- a number that identifies a computer on the Internet. An IP address consists of four numbers (0-255) separated by periods. An ISP can use an email server's IP address when determining whether to accept the email. Sharing an email server uses a "shared" IP address; using your own IP address uses a "private" or "dedicated" IP address. Phishing - attempting to criminally and fraudulently acquire sensitive information, such as usernames, passwords, and credit card details, by masquerading as a trustworthy entity in an electronic communication. eBay, PayPal and online banks are common targets. Phishing is typically carried out by email or instant messaging and directs users to enter details at a website. Sender ID - an anti-spam mechanism that combines SPF and Caller ID. Usually, Sender ID is based on the visible from domain (PRA) instead of the bounce domain (MFROM) used in SPF. Senders without a valid Sender ID record are likely to have problems delivering to Hotmail. Sender Policy Framework (SPF) - a DNS-based email authentication technology that uses the MFROM address to identify and reject forged addresses. Spoofing - falsifying information in an email message, for example, using a fake from address.
This page was last updated on Tue, 16 Mar 2010 14:36:39 GMT.
Tags: (Edit tags)
|
|||
Powered by MindTouch 2010 |