On October 19, 2021, we have enabled single-sign-on for our Plesk Support Center to provide a seamless login/account experience. This implies that you’ll be able to use a single account across any of our web-facing properties.
If you had already registered your account at Plesk 360 (formerly known as My Plesk) please use one for login. Otherwise please re-register it using the same email address as your existing Zendesk login (support account). It’s essential that you use the same email address on our support center to ensure that your tickets stay attached to the same account.

Articles in this section

See more

What is SPF and how to configure it on a Plesk server

Avatar
Kuzma Ivanov
Updated
Follow
Plesk for Windows Plesk for Linux kb: how-to ABT: Group B

Applicable to:

  • Plesk for Linux
  • Plesk for Windows

Question

What is SPF and how to configure it on a Plesk server?

Answer

SPF (Sender Policy Framework) is a system that ensures emails are genuine by comparing them against a TXT list of approved senders. Senders are published in the DNS record. These DNS entries can be trusted because owners and administrators are the only individuals allowed to make them.

 

A DNS TXT record is created for each A and MX records at Domains > example.com > DNS Settings.

DNS TXT records have the following format:

CONFIG_TEXT: example.com IN TXT "v=spf1 spf_string"

Here, spf1 is SPF version, and spf_string takes the combination of the so-called mechanisms:

CONFIG_TEXT: a, ptr, mx, ip4, include, all

Where all is a finalizing mechanism and must be placed at the end. Each mechanism may have a prefix pointing to a certain type of processing messages:

CONFIG_TEXT: '-' fail (message is rejected)
'~' softfail (message is passed with warning)
'+' pass (message is passed - the default prefix value)
'?' neutral The simplest (and most popular)

 

An SPF record will look like:

CONFIG_TEXT: example.com IN TXT "v=spf1 mx -all"

This means that mail from john_doe@example.com can be sent only from its MX record. There can be used other options. If other servers send mail from domain.com, you can describe them by giving "arguments" to the a:, mx:, ip4:, and ptr: mechanisms. mx: takes domain names and approves all the MX servers of these domains. Example:

CONFIG_TEXT: "v=spf1 a mx a:example.com -all"

Mail can be sent from its MX and from example.com server.

To set both ipv4 and ipv6 SPF records, the following syntax can be used:

CONFIG_TEXT: "v=spf1 ip4:XX.XX.XX.XX ip6:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX ~all"

E.G:

CONFIG_TEXT: "v=spf1 ip4:203.0.113.2 ip6:2001:db8:f61:a1ff:0:0:0:80 ~all"

 

(Linux only) To access SPF configuration form, log in to Plesk > go to Tools & Settings > Mail Server Settings and specify the required options in the SPF spam protection section.


Screenshot_2019-09-06_Plesk_Onyx_17_8_11.png

Comments

3 comments

Sort by Date Votes
  • Avatar
    Robert

    Please post the default values for REJECT mail when SPF resolves...

    SPF local rules
    SPF guess rules
    SPF explanation text

    0
    Comment actions Permalink
  • Avatar
    Anton Maslov

    @Robert,

    The default values are "empty". In most of the cases local, guess and explanation text are not needed. These settings are for specific use-cases.

    0
    Comment actions Permalink
  • Avatar
    Ahmad Alwareh (Edited )

    Anton Maslov

     

    I have Plesk on Windows Server 2019 and I cannot find these settings, are they really available for Windows? How to enable them?

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles