Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 9 subscribers
  • Views 954 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

why we are having SPF Filtering in the Policy ? Product: central email protection advanced.

IT Support144

Hi,

 

We are having Sophos central email protection advanced but its not validating the SPF. 

 

When we Create a Support ticket they are informed me that. If a  domain is not having spf record the sophos will accept the mail. ........... :) 



This thread was automatically locked due to age.
Parents
  • 0

    I am a little bit confused. 

    There are two different parts of SPF: Outbound and Inbound (from your perspective). 

     

    So if you get a mail from somebody, they are responsible for having a correct SPF txt record in their domain (DNS). 

    Central Email will scan for inbound mails and look for a invalid sender, if possible. If the sender does not have any SPF Record, central will accept it anyway, because it cannot verify at all. 

     

    For outbound mail, you are responsible for maintaining the SPF for your domain.

    https://community.sophos.com/kb/en-us/132343

    You have to add those records into your domain and send through Central Email. 

     

     

    If you would start to reject all "none existing SPF" mails (which you can in Central email), you will have a lot to do to approve all those mails, because many sender basically do not maintain their records. 

    __________________________________________________________________________________________________________________

Reply
  • 0

    I am a little bit confused. 

    There are two different parts of SPF: Outbound and Inbound (from your perspective). 

     

    So if you get a mail from somebody, they are responsible for having a correct SPF txt record in their domain (DNS). 

    Central Email will scan for inbound mails and look for a invalid sender, if possible. If the sender does not have any SPF Record, central will accept it anyway, because it cannot verify at all. 

     

    For outbound mail, you are responsible for maintaining the SPF for your domain.

    https://community.sophos.com/kb/en-us/132343

    You have to add those records into your domain and send through Central Email. 

     

     

    If you would start to reject all "none existing SPF" mails (which you can in Central email), you will have a lot to do to approve all those mails, because many sender basically do not maintain their records. 

    __________________________________________________________________________________________________________________

Children
No Data
Unfiltered HTML