cPanel SPF records always configured for SOFTFAIL, why?

jols

• February 27, 2015 15:26

Hi, I keep reading this sort of thing: Publishing an SPF record that uses -all instead of ~all may result in delivery problems. So I am wondering why all cPanel SPF records are automatically established with SOFTFAIL "~all", rather than "-all"?

• 

  kdean

  • February 28, 2015 00:09

  Softfail "~all" is a safe default because receiving mail servers will not as likely block it or send it to a spam folder. When you set it to "-all" you better make sure that you have all the included servers, IPs, etc. that send email with your domain, otherwise the SPF record will indicate that a server may not be authorized to send mail on behalf of your domain. So, if you know you have everything you need, then go ahead and set it to "-all" in my opinion.

  0
• 

  jols

  • February 28, 2015 00:26

  Thanks very much for the clarification. This is something I've been grappling with for years, and you've explained it clearly.

  0
• 

  cPanelMichael

  • March 02, 2015 12:01

  Hello :) Yes, the consensus is to avoid hard fails on SPF records since it breaks email forwarding unless the forwarding server uses SRS. The "~all" entry is generally preferred since it gets messages from non-standard senders bumped up in spam detection systems, but doesn't outright fail them. Thank you.

  0
• 

  kdean

  • March 02, 2015 15:01

  Which brings up the issue of cPanel not providing the interface to enable SRS support itself for the emails it forwards. Seems to be a simple update that hasn't been implemented for years. Add your vote. [url=http://features.cpanel.net/responses/built-in-srs-support-under-advanced-exim-configuration-editor-in-whm]Built-in SRS support under Advanced Exim Configuration Editor in WHM. | cPanel Feature Requests

  0
• 

  eugenevdm.host

  • June 21, 2022 05:57

  ... Yes, the consensus is to avoid hard fails on SPF records since it breaks email forwarding unless the forwarding server uses SRS. The "~all" entry is generally preferred since it gets messages from non-standard senders bumped up in spam detection systems, but doesn't outright fail them. ...

  
  More incredible knowledge that I never knew! Thank you, was wondering why we are getting hard fails on forwarders. @kdean, sorry for replying to a 7 year old post, but fortunately SRS is now available:

  0
• 

  kdean

  • June 23, 2022 08:14

  @kdean, sorry for replying to a 7 year old post, but fortunately SRS is now available:

  
  Yeah, replies this old make me go wait, that's me up above. What did I have to say? What was I talking about? ... and do I still agree with myself? And I still do.

  0
• 

  eugenevdm.host

  • June 23, 2022 09:12

  Yeah, replies this old make me go wait, that's me up above. What did I have to say? What was I talking about? ... and do I still agree with myself? And I still do.

  
  For the good of the next generation I sometimes reply on old posts to send good karma for solved problems, because, frankly, it makes me happy. Ahem.

  0

Please sign in to leave a comment.