Skip to main content
cPanel Technical Support has been heavily impacted by hurricane Beryl and our ability to respond to tickets has been hindered as a result. We appreciate your understanding and patience as we address these delays.

cPanel SPF records always configured for SOFTFAIL, why?

Comments

7 comments

  • kdean
    Softfail "~all" is a safe default because receiving mail servers will not as likely block it or send it to a spam folder. When you set it to "-all" you better make sure that you have all the included servers, IPs, etc. that send email with your domain, otherwise the SPF record will indicate that a server may not be authorized to send mail on behalf of your domain. So, if you know you have everything you need, then go ahead and set it to "-all" in my opinion.
    0
  • jols
    Thanks very much for the clarification. This is something I've been grappling with for years, and you've explained it clearly.
    0
  • cPanelMichael
    Hello :) Yes, the consensus is to avoid hard fails on SPF records since it breaks email forwarding unless the forwarding server uses SRS. The "~all" entry is generally preferred since it gets messages from non-standard senders bumped up in spam detection systems, but doesn't outright fail them. Thank you.
    0
  • kdean
    Which brings up the issue of cPanel not providing the interface to enable SRS support itself for the emails it forwards. Seems to be a simple update that hasn't been implemented for years. Add your vote. [url=http://features.cpanel.net/responses/built-in-srs-support-under-advanced-exim-configuration-editor-in-whm]Built-in SRS support under Advanced Exim Configuration Editor in WHM. | cPanel Feature Requests
    0
  • eugenevdm.host
    ... Yes, the consensus is to avoid hard fails on SPF records since it breaks email forwarding unless the forwarding server uses SRS. The "~all" entry is generally preferred since it gets messages from non-standard senders bumped up in spam detection systems, but doesn't outright fail them. ...

    More incredible knowledge that I never knew! Thank you, was wondering why we are getting hard fails on forwarders. @kdean, sorry for replying to a 7 year old post, but fortunately SRS is now available:
    0
  • kdean
    @kdean, sorry for replying to a 7 year old post, but fortunately SRS is now available:

    Yeah, replies this old make me go wait, that's me up above. What did I have to say? What was I talking about? ... and do I still agree with myself? And I still do.
    0
  • eugenevdm.host
    Yeah, replies this old make me go wait, that's me up above. What did I have to say? What was I talking about? ... and do I still agree with myself? And I still do.

    For the good of the next generation I sometimes reply on old posts to send good karma for solved problems, because, frankly, it makes me happy. Ahem.
    0

Please sign in to leave a comment.