SPF Protection

: Terminology; Disk Space; Hepsia Control Panel; Domain Names Hosted; InnoDB; Integrated Ticketing System; Email Accounts; Memcached; Node.js; Subdomains; Support; Bandwidth; Varnish; VPN Traffic; Assisted Website Migration; Weekly Backup; Join us

Sender Policy Framework, or SPF, is a validation system, which is designed to prevent the so-called e-mail spoofing where an email message can be sent from one email, but to seem as being sent from a different, often with the idea to scam the recipient in some way. If SPF protection is activated for a domain, a specific record is made for it in the Domain Name System and all of the DNS servers worldwide have it. The record contains all the e-mail servers that are allowed to send legitimate messages from an email address part of the domain. When a message is sent, the very first DNS server it goes to checks the SPF record and if the sending server is permitted, the message is sent to the target destination. When, however, the sending server is not contained in the SPF record for the given domain, the message will not be forwarded and it will be discarded. In the event that you employ this solution, it will prevent third parties from sending spam emails which appear to have been sent from you.

SPF Protection in Cloud Hosting

When you host your domains in a cloud hosting account on our end and we handle the e-mails for them, you'll be able to enable SPF protection for any of them with a couple of clicks inside your Hepsia Control Panel. This service is available in its own section where you will be able to see which domains are already protected. For those which aren't, you'll be able to enable the SPF protection service and configure a variety of things at the same time - the hostnames of the mail servers that are permitted to send messages from your email addresses, the IPv4 and IPv6 addresses of the servers, and even to create a rule that email messages can be sent only if your domain names include our MX records. The last mentioned solution is the most secure one, but you can use it if we manage the email addresses for your domains and you're not using another email service provider. The newly created records will propagate within one day and nobody will be able to fake the FROM field in an e-mail with your e-mail addresses.