|
well, yeah.... all domains that you host should have an
SPF record with -all
regardless if the domain has MX records or
not.
Some systems, though, won't be able to setup the -all due
to too many customers sending emails from unknown
servers. Switching to -all would cause those outbound
emails to fail at AOL, Earthlink etc domains who do use the SPF system
too.
To change from ~all to -all would require sending out an
email saying "outbound emails shall be via our authorized mail servers; and
nowhere else." & giving the customers 30 days to comply.
If a system is experiencing lots of 'backscatter', i.e.
faked emails, rejected faked emails, etc. then it may be time to put in the -all
and let Surgemail handle it.
Likewise we have customers with their own websites.
-all is on those too. The customer needs to contact us to update their SPF
records accordingly. The end result is No faked
'backscatter'.
BarryZ
|