Providers

A - E
F - L
M - S
T - Z

Barracuda Email Security

Supports SPF Does Not Support DKIM

How to Set Up/Modify SPF for Barracuda

The following description addresses how to update a Domain Name Service (DNS) record to use SPF with your custom domain in Barracuda.

To utilize a custom domain, the Barracuda provider requires an SPF TXT record be added to the DNS record. This TXT record is then used by DNS to recognize email servers allowed to send messages on behalf of your custom/third-party domain. To determine whether a correspondence from the specified domain comes from an authorized messaging server, the recipient system relies on the implemented SPF TXT record. At that point, the message is either accepted, quarantined, or rejected by the email receiving system.

To implement SPF authentication for your domain, you will need access to your DNS records in the domain hosting account. Important: If you already have an SPF record, then you should modify that existing record. You must not have more than one SPF record.

For convenience, be sure to log in to your Barracuda account to verify your domain and copy your TXT records. Barracuda utilizes an include mechanism during the set-up process. For example, if you do not have an SPF record on your domain, the following scenario is the most common and would pass SPF:

v=spf1 include:spf.ess.barracudanetworks.com ~all

If you do already have an SPF record on your domain, simply add the following to it:

include:spf.ess.barracudanetworks.com

To create an SPF record for your domain name, follow these steps:

1. Log in to your Barracuda Cloud Control account

2. Click Email Security in left pane

3. Go to Inbound Settings > Sender Authentication page

4. Select from available options in Use Sender Policy Framework section (Block FAIL; Block FAIL, SOFTFAIL; Off)

5. Create a TXT record with the following specifications:

v=spf1 include:spf.ess.barracudanetworks.com ~all

6. Decide how you want to enforce SPF failures:

~all results in a soft fail (not authorized, but not explicitly unauthorized)

-all results in a hard fail (unauthorized)

?all is neutral (similar to no policy)

As shown above, enter your choice after v=spf1 include:spf.ess.barracudanetworks.com

7. Save changes

DKIM/SPF Setup Highlights

The below sections highlight notable characteristics of setting up DKIM and SPF for this provider as well as highlighting advanced settings if offered by this Outbound Email Source.

SPF

SPF Include Tag Required

This outbound email provider uses an include mechanism to add this provider's IP space to your SPF. To get fully set up with SPF for this provider, you will need to take the provided “include” domain and add it to your SPF record. An example of an SPF record without an include tag is compared to one with the tag added below (the include tags added are denoted in bold).

 

Initial SPF Record:

HOST TEXT
yourdomain.com v=spf1 ~all

 

SPF record include added:

HOST TEXT
yourdomain.com v=spf1 include:sender.net include:new3rdparty.com ~all

 

DKIM

This outbound email provider does not support DKIM signing.

burritos@banana-pancakes.com braunstrowman@banana-pancakes.com finnbalor@banana-pancakes.com ricflair@banana-pancakes.com randysavage@banana-pancakes.com