A Sender Policy Framework (SPF) record is a type of Domain Name Service (DNS) TXT record that identifies which mail servers are permitted to send email on behalf of your domain. The purpose of an SPF record is to detect and prevent spammers from sending messages with forged “from” addresses on your domain.The symptoms of Email Spoofing include a large  number of ‘Non-delivery Emails’ entering your inbox sporadically. These are emails that have been sent from another email address, but because the emails have had the ‘From’ address forged to look like your email address, any emails that have failed to be delivered will be delivered  to your inbox.

This is quite common because the vast majority of ‘spoof’ emails are known to be spam by most email platforms, meaning most if not all mails will never be delivered to the  intended recipient and will instead generate a ‘Non-delivery report’.

Adding an SPF record can help prevent others from spoofing your domain. These records won’t necessarily be the same as your mail provider or server would be different to another. For example, Office365 provides you with the record to add. You would then need to add it to your DNS zone.

The first step would be to login to your cPanel and select the “Advanced Zone Editor”

You will notice at the top of the new page that there is a section to add  your DNS record. Change the type to “TXT” and fill in the required fields.  If you have multiple domains added to your hosting package then please ensure that you select the correct one before adding the DNS record.

Name will be what you decide to call your record.

You can keep the TTL (time to live) the same as the others that has already been created if you were not given one.

TXT Data is the “rule” that you wish to apply.

For example, if your organization uses only MS Office 365 and you do not  have local mail servers, your SPF record should look like this:

If you are required to add an SPF record for a domain whose emails are being hosted here then this record can be used:

v=spf1 a mx include:relay.mailchannels.net  ?all

Please keep in mind that if the domain’s name servers are being pointed elsewhere, the update will need to be done on that system.