How To: Create An SPF Record
============================

'SPF' Records, or Sender Policy Framework Records, are used to define a set of 
rules that valid email from a domain will follow. Email that is attempted to be 
sent without following this policy may be rejected, such as email sent with a 
spoofed domain. Detailed information on SPF record settings may be found 
`here <https://dmarcian.com/create-spf-record/>`__. 

SiteWorx users are able to manage SPF records from the Administration menu in SiteWorx. 

.. contents::

To Generate an SPF Record
-------------------------

#. Log into SiteWorx from the browser (https://ip.ad.dr.ess:2443/siteworx)
#. In SiteWorx, navigate to **Administration > Mail Options > SPF**. This opens the 
   Domain SPF Records page
#. Click the **Pencil**. This opens the Edit SPF Record For All Domains form. There are 
   two different options within this form that can be used to generate the SPF Record--
   the **Advanced Interface** and the **Wizard Interface**

   .. image:: /images/sw-spf-wizard.png
      :alt: siteworx spf form

To Use the Advanced Interface
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The Advanced Interface may be useful if the exact settings and format for the SPF record 
are already known, or if additional, custom settings that may not be set from the Wizard 
Interface are desired. 

#. Update the **SPF Record Value** field. This edits the SPF record directly, and will
   override and changes made from with Wizard Interface. 
#. Click **Update All Domains** 

To Use the Wizard Interface
^^^^^^^^^^^^^^^^^^^^^^^^^^^

The Wizard Interface may be useful to quickly generate a more basic SPF record. 

#. Update the Required Fields: 

   - **SPF Version**: The SPF version the record will use.There are two options: 
   
     - **SPFv1**: (Recommended) The current standard 
     - **SPFv3**: This option is not recommended, as it is not widely used
   
   - **Use A Records?**: Defines whether the IP(s) referenced in the DNS A Records for the 
     domain are permitted to send mail
   - **Use MX Records?**: Defines whether the Should the hostname(s) referenced in 
     the DNS MX Records for the domain are permitted to send mail
   - **Use PTR Records?**: (Not Recommended) Defines whether the PTR Records for the 
     sender's IP should be used to validate the sender's domain
   - **Other Servers**: Defines whether any other hostnames or IPs need to be 
     authorized to send mail for the domain
   - **Fallback**: (Optional) Defines how to respond if the record has produced no match
     There are four options: 

     - **Fail. Mail should be rejected**
     - **Soft fail. Mail is generally accepted, but tagged**
     - **Neutral**
     - **Allow**

   - **Redirect**: (Optional) Redirects verification to use the SPF record of the 
     specified domain. This is may be useful, for example, if mail is sent through 
     the customer's ISP's servers,  and they have defined an SPF record
   - **Explanation**: (Optional) Defines a DNS name whose TXT Record may be returned, 
     along with failure messages. This option is rarely used, and may not be universally 
     supported

#. Click **Update All Domains**