Outlook Web App > For Exchange Online Administrators > Configure Your Domain > Configure DNS > Create DNS Records >

Use an SPF Record to Validate E-mail Sent from Your Domain

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu

Topic last modified: 2011-11-09

You use SPF records to ensure that destination e-mail systems trust messages sent from your domain. The SPF record is important because it ensures that all the messages from your domain appear to originate from the messaging servers that support the cloud-based service.

What is an SPF record?

An SPF (sender policy framework) record is a text (TXT) record that uses the Sender ID Framework. The Sender ID Framework is an e-mail authentication protocol that helps prevent spoofing and phishing by verifying the domain name from which e-mail messages are sent. Sender ID validates the origin of e-mail messages by verifying the IP address of the sender against the alleged owner of the sending domain.

Domain administrators publish SPF records in DNS. The SPF record identifies authorized outbound e-mail servers. Destination e-mail systems verify that messages originate from authorized outbound e-mail servers. For more information, see Sender ID.

What do I need to create an SPF record?

To create an SPF record that identifies the Microsoft messaging servers as a legitimate source of mail for your domain, create a TXT record with the following value: . v=spf1 include:outlook.com ~all.

If you’re using Forefront Online Protection for Exchange (FOPE), create a TXT record with the following value: v=spf1 include:outlook.com include:spf.messaging.microsoft.com ~all.