This guide explains how to add or modify one or more SPF type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• If your domain name is registered with Infomaniak, your email is managed by Infomaniak, but your website is hosted with another provider (Wix for example), you are probably managing the DNS zone (and therefore the SPF) with this other provider: refer to this other guide on this subject.

Understanding SPF type records

The SPF (Sender Policy Framework) record type is a standard for verifying the domain name of the sender of an email and aims to reduce SPAM.

It is used to indicate which server is authorized or not to send emails for a domain.

If the SPF fails for an email, this means that it was not sent from an authorized server/IP address by the administrator of the sending domain.

The email is then considered as spam.

Moreover, Infomaniak installs this type of record automatically when creating a Mail Service on your domain (strict SPF):

v=spf1 include:spf.infomaniak.ch -all

Thus, the recipient server of the email you send will evaluate that any email not coming from Infomaniak servers will be rejected. This prevents malicious individuals from impersonating email addresses from your domain.

You can also decide to modify the SPF for a more flexible model:

v=spf1 include:spf.infomaniak.ch ?all

In this case, the recipient server of the email you send will evaluate according to its own rules whether it accepts emails not coming from Infomaniak servers.

In summary:

• ?: the receiving server accepts the message even if the sender is not listed in the SPF
• ~: the receiving server generally accepts the message if it is not listed in the SPF but identifies it as suspicious
• -: the receiving server rejects the message if it is not listed in the SPF (recommended)

Add an SPF via a TXT record

Refer to this other guide to manage this type of record in a DNS zone.

Add multiple SPFs

If you use other email providers in addition to Infomaniak, you need to obtain their SPF and then merge it with Infomaniak's according to a specific syntax.

Example of 3 SPFs to merge:

• That of Infomaniak: v=spf1 include:spf.infomaniak.ch -all
• Those of 2 secondary providers:
  • v=spf1 include:the-second-domain.xyz ?all
  • v=spf1 include:the-other-domain.xyz ~all

... the final SPF to be inserted in your DNS zone must be in the form:

v=spf1 include:spf.infomaniak.ch include:the-second-domain.xyz include:the-other-domain.xyz -all

Delete any other SPF entry from the DNS zone of your domain! Any DNS addition/modification can take up to 48 hours to propagate.

Limit of the number of SPF

Multiple SPFs are limited to a maximum of 10 inclusions.

The Infomaniak SPF usually already includes 4 inclusions:

• include:relay.mail.infomaniak.ch
• include:app.mail.infomaniak.ch
• include:newsletter.infomaniak.com
• include:amazonses.com

Check the SPF record(s)

The Global Security tool on the Infomaniak Manager allows you to easily check and correct any problematic records you may have.

In case of a problem, it is recommended to analyze your domain name on MxToolbox to check if your SPF contains syntax errors, too many inclusions, or other issues that could lead to an error:

… or directly at the address https://mxtoolbox.com/spf.aspx.