How to Set Up/Modify SPF for Rackspace
The following description addresses how to update a Domain Name Service (DNS) record to use SPF with your custom domain in Rackspace.
To utilize a custom domain, the Rackspace provider requires an SPF TXT record be added to the DNS record. This TXT record is then used by DNS to recognize email servers allowed to send messages on behalf of your custom/third-party domain. To determine whether a correspondence from the specified domain comes from an authorized messaging server, the recipient system relies on the implemented SPF TXT record. At that point, the message is either accepted, quarantined, or rejected by the email receiving system.
To implement SPF authentication for your domain, you will need access to your DNS records in the domain hosting account. Important: If you already have an SPF record, then you should modify that existing record. You must not have more than one SPF record.
For convenience, be sure to log in to your Rackspace account to verify your domain and copy your TXT records. Rackspace utilizes an include mechanism during the set-up process. For example, the following scenario is the most common and would pass SPF:
v=spf1 include:emailsrvr.com ~all
To create an SPF record for your domain name, follow these steps:
1. Log in to control panel for your domain DNS host
2. Create a TXT record with the following specifications:
v=spf1 include:emailsrvr.com ~all
3. Decide how you want to enforce SPF failures:
~all results in a soft fail (not authorized, but not explicitly unauthorized)
-all results in a hard fail (unauthorized)
?all is neutral (similar to no policy)
As shown above, enter your choice after v=spf1 include:emailsrvr.com
4. Save changes
5. Authorize additional email servers by adding their IP or server name after include:
v=spf1 include:emailsrvr.com include:othermail.com ~all
6. Save changes
How to Set Up/Modify DKIM for Rackspace
To create a DKIM record for your domain name, do the following:
1. Log in to Cloud Office Control Panel
2. In Domains section of homepage, click Sender Authentication (DKIM) link
3. On Send Authentication (DKIM) page, click domain that you want to enable DKIM
4. Click Enable DKIM for button
If your domain’s DNS is managed through your Cloud Office Control Panel, DKIM enabling is automatic
If your domain’s DNS is managed through another service, the DNS key and value information to add a new TXT record are provided
5. After adding the DKIM TXT record, click Verify TXT Record button to confirm the new DKIM record is publicly available in DNS and is correct
6. When DKIM is enabled, all outgoing messages will be signed using your new DKIM key
As a user of this outbound email provider, Rackspace customers are afforded DKIM signing because it supports that mechanism. By utilizing Rackspace’s self-service portal, you can manually set up DKIM at your convenience via TXT records mentioned above. Overall, this Rackspace product provides beneficial components (e.g., DKIM signing, custom DKIM records, self-service set up with TXT records) that result in a streamlined process.