In this tutorial, you will learn how to configure PowerSPF for your domain and start your journey of shifting to automated SPF to avoid the SPF errors.
Step 1: The first step to start with your PowerSPF deployment would be to sign up with PowerDMARC to gain access to the PowerDMARC control panel. PowerSPF is available at certain plans, contact your account manager or our sales team to get the feature enabled.
After signing in, the first view available to you would be of the PowerDMARC dashboard.
Step 2: On the left-hand side menu displaying the various features, navigate to and click on the PowerSPF tab, as shown below:
Step 3: Add your domains by clicking on + Add Domain button at the top of the PowerSPF page (If you haven’t added your domain already). Make sure you add only one domain per line.
Once you have added your domain you have to go ahead and publish the DNS TXT record that we generate for you to configure your domain with PowerSPF. For this follow the steps mentioned below:
Step 1: You can now view your registered active domains on the PowerSPF page by cascading the Active Domain drop-down menu, like shown below:
Step 2: As soon as you click on your desired domain from the list, the page will open to display all the current SPF record configuration of that domain, as shown below:
On this page, you can view your active SPF record that is published on your domain’s DNS, all your active mechanisms and their mode.
Step 3: You can add mechanisms to your SPF record by navigating to the Add new mechanism section.
Step 4: Choose the way you want to authorize sending sources on your SPF record by selecting the mechanisms from the cascading menu, as shown below:
Step 5: After selecting your desired mechanism, for example IP v4, you’ll have to type in the IP in the blank box and click on the +Add button.
Step 6: You will find that your newly added mechanism is now being displayed in the list of active mechanisms. Now you can go ahead and click on Save SPF record to save changes.
Step 7: Click on the “Enable PowerSPF” button if it isn’t already enabled for your domain.
Note: If PowerSPF is disabled for your domain, you can still add new sources through the portal and your previous PowerSPF record will still be live on your DNS, but the changes you make would not be reflected on the PowerSPF record.
Step 8: Once you save changes and enable PowerSPF, the changes you made would be reflected in the manually flattened SPF record as shown below:
Deleting a Mechanism
You as the user can also delete a mechanism you had previously added by simply navigating to the Mechanisms section on the PowerSPF page and unchecking the box adjacent to the desired mechanism you want to remove from your SPF record. Click on Save SPF record to save changes.
Once you save changes, the changes you made would be reflected in the manually flattened SPF record as shown below:
However as a user you are NOT supposed to publish this manually flattened SPF record.
Why is manual flattening not recommended?
The problem with this "manual" flattening is that email service providers may change or add to their IP addresses without telling you.This ultimately leads to SPF failure and problems in email delivery. With manual flattening you need to constantly monitor your service providers for these changes, which is troublesome and not recommended.
Step 9: Click on Automatic Setup and replace your existing SPF record with the automatically generated SPF record. You will find that this SPF record length is much shorter as with PowerSPF we remove all include statements that have nested IP addresses automatically for you, as shown below:
Now as a user all you need to do is publish this automatically generated SPF record instead of the manually generated one.
Note that your inbox service providers may change their mechanisms and email-sending IP addresses without notifying you as the user. That is why we in PowerSPF continuously check to ensure that the latest IP addresses are being authorized in your SPF record. Our checks run every 20 minutes and dynamically update your sender policy framework (SPF) record without any requirement or intervention from your side. We help you always stay under 10 DNS lookups to avoid errors, ensuring email authentication and deliverability.
We sincerely hope that this manual has successfully helped you configure PowerSPF for your domain. However, in case of any further queries, get in touch with our round-the-clock support team at support@powerdmarc.com, and we will get back to you!