SPF Protection

: Glossary; Disk Space; Hepsia Control Panel; Domain Names Hosted; InnoDB; Integrated Ticketing System; Email Accounts; Memcached; Node.js; Subdomains; Help Desk; Bandwidth; Varnish; VPN Traffic; Assisted Website Migration; Weekly Backup; Order

SPF, which stands for Sender Policy Framework, is an email protection system, that is used to verify whether an e-mail message was sent by a licensed server. Using SPF protection for a domain will prevent the faking of email addresses created with the domain. In simple words: activating this attribute for a domain creates a particular record in the Domain Name System (DNS) that contains the IP of the servers which are allowed to send e-mail messages from mailboxes using the domain. When this record propagates globally, it exists on all DNS servers that route the Internet traffic. Any time some e-mail message is sent, the first DNS server it goes through verifies if it comes from an approved server. In the event it does, it's sent to the destination address, but when it does not come from a server part of the SPF record for the domain, it is rejected. In this way nobody will be able to mask an e-mail address to make it look as if you're e-mailing spam. This method is also referred to as email spoofing.

SPF Protection in Cloud Hosting

When you host your domain names in a cloud hosting account on our end and we manage the email addresses for them, you are able to activate SPF protection for any of them with a few clicks inside your Hepsia Control Panel. This service can be found in a section of its own where you're able to see which domains are already secured. For the ones that aren't, you'll be able to enable the SPF protection solution and set up a lot of things in the process - the hostnames of the mail servers that are allowed to send messages from your mailboxes, the IPv4 and IPv6 addresses of these servers, and even to create a rule that messages can be sent only when your domain names use our MX records. The last mentioned option is the most secure one, and it can be used in the event that we handle the emails for your domain names and you are not using another email service provider. The newly generated records will propagate within a day and nobody will be able to forge the FROM field in a message using your email addresses.