ID #262

Do you support anti-forgery standards (SPF / DomainKeys) for email?

Applies to: Grid System

We do not currently provide systemic or technical support for SPF or DomainKeys/DKIM. However, tools exist for you to implement these anti-forgery technologies for your domains.

SPF uses a special DNS record that defines the specific servers from which email you send is expected to emanate.

Once you define a policy, any mail you send from unrecognized servers could be penalized or rejected by the (relatively) small number of destination servers that check SPF records. We provide details of our sending servers (on a best-effort basis) via our record, which you may wish to include in your SPF record. If Modwest is providing your DNS services, you can log into OnSite to add an SPF record for your domain under 'Manage DNS'. For details of how to implement your SPF record, you'll need to consult the online documentation such as the experimental RFC or Wikipedia article.

With DomainKeys, a public-private key infrastructure is required, such that mail received by the (relatively) small number destination of servers that check can be compared against the key defined in your DNS. Thus the server itself is less important but you need to sign outgoing messages somehow.

On the Modwest grid email system, we are unable to sign your messages at the server level, so that means you'll need to sign your own messages with your own DKIM tools. For details of how to do so, you'll need to consult the online documentation such as the RFC or

Managed server customers can contact us to discuss DKIM implementation if desired.

Last update: 2010-09-27 15:58
Author: FAQ Admin
Revision: 1.2

Digg it! Share on Facebook Print this record Send FAQ to a friend Show this as PDF file
Please rate this FAQ:

Average rating: 5 (2 Votes)

completely useless 1 2 3 4 5 most valuable

You can comment this FAQ

Comment of Anonymous:
The OnSite DNS manager only expects the 'content' part of your SPF record. Some of the online SPF-generation wizards propose something like: IN TXT "v=spf1 mx"

You only need to worry about the last part (starting with v=) for the OnSite DNS Manager.

Added at: 2008-05-20 11:31