Comments on: Setting Up SPF, SenderId, Domain Keys, and DKIM

By: Amr

Amr — Wed, 01 Feb 2012 01:49:42 +0000

I know it’s a little old but it was very useful and helpful.
I must say Thanks :)

By: Devon

Devon — Mon, 17 Oct 2011 23:04:53 +0000

You need to add xyz.com to the SPF record for abc.com in abc.com’s TXT DNS record. Try a wizard like this: http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/

For DKIM you’ll need to be signing the outgoing messages on your outgoing xyz.com server with the correct signature for abc.com.

By: arun k

arun k — Mon, 17 Oct 2011 12:17:19 +0000

hello Devon,
i am configure a mail server for bulk mailing. using postfix on centos with SPF and DKIM. problam is my server running on particular x.x.x.1 ip and hostname is abc.com. and my bulk mailing software running on particular x.x.x.2 ip and hostname is xyz.com. when i am sending mail xyz.com shows in header and mail goes to spam. now you tell me where i maintain SPF and DKIM record on abc.com or xyz.com. if any configuration need for server also tell me.

By: Stuart Gathman

Stuart Gathman — Sat, 18 Jun 2011 03:46:30 +0000

SPF may or may not provide benefits depending on your situation, but it has no downsides – except publishers who neglect basic sanity checking of their policy (many free tools available – including on this page), and idiot mail receivers who blindly check SPF (and reject on FAIL) in situations where it is undefined (like behind an MX or unlisted forwarder). If done according to spec, the worst SPF can do is provide no result.

By: Stuart Gathman

Stuart Gathman — Sat, 18 Jun 2011 03:41:27 +0000

You can use the dkimproxy described above with Exchange. Just configure Exchange to use your proxy as the outgoing “smarthost” or “outbound server” or whatever the Exchange programmers decided to call it. (I’m assuming Exchange has the feature – if not, it is the only MTA on the planet that doesn’t.)

By: araç borç sorgulama

araç borç sorgulama — Tue, 31 May 2011 22:50:28 +0000

I was just seeking this information for some time. After 6 hours of continuous Googleing, at last I got it in your website. I wonder what’s the lack of Google strategy that don’t rank this kind of informative sites in top of the list. Generally the top web sites are full of garbage.

By: March (Q)Mail Server Madness » ghidinelli.com

March (Q)Mail Server Madness » ghidinelli.com — Wed, 04 May 2011 20:14:14 +0000

[...] SPF and Sender ID rely on specially crafted DNS records that identify which mail servers are allowed to send mail for your domain. By contrast, DomainKeys/DKIM take pieces of your message, cryptographically hash them with a key (part of which only your server knows) and embed the signature as a header which is verified using the other half of your key (which is public) that is stored in a specially crafted DNS record for your domain or mail server. You must have the ability to create DNS TXT records or none of these will work for you. Here’s a good article with a more details on how it all works. [...]

By: Ellert

Ellert — Wed, 23 Mar 2011 21:17:08 +0000

As DKIM is now supported by exim by default, exim users are better off reading this: http://mikepultz.com/2010/02/using-dkim-in-exim/
dont skip the comments, those make the difference to get it to work.

By: Ellert

Ellert — Sat, 12 Mar 2011 13:25:28 +0000

Since version 4.70, DKIM support is compiled into Exim by default, so need for tricks anymore.
See http://www.exim.org/exim-html-current/doc/html/spec_html/ch54.html

By: Devon

Devon — Tue, 03 Aug 2010 13:40:04 +0000

Good info! Thank you!