Using DNS SPF records for Internet domains

Create Domain Name Service (DNS) Sender Policy Framework (SPF) records to identify all of the Internet domains you use in SmartCloud Notes® Internet addresses. These SPF records should specify that the SmartCloud Notes servers are permitted to send email on behalf of all of your domains.

About this task

IBM uses SPF record definitions to identify the SmartCloud Notes servers that can send mail to the Internet on behalf of our customers. You can easily include these SPF records in your domain-specific SPF records to simplify the task of specifying that SmartCloud Notes servers are permitted to send mail on behalf of your domains.

Typically your Domain hosting service allows you to create an SPF record and will provide instructions. In some cases, for example, there might be a wizard that walks you through the process. There are many mechanisms for identifying the set of servers that are permitted to send mail. The examples provided show how to use the include mechanism in SPF records to identify the SmartCloud Notes servers.

Note: The DomainKeys Identified Mail (DKIM) email validation system is not supported for SmartCloud Notes.
When you create your SPF records, be sure to include the SmartCloud Notes SPF record in addition to any other mechanisms used to identify other servers that are sending mail on behalf of your domains. Depending on your data center, use one of the following include statements in your SPF record definition:
Table 1. SPF Record Statements
Data Center Statement
North American include:_spf.notes.na.collabserv.com
Asia Pacific include:_spf.notes.ap.collabserv.com
European include:_spf.notes.ce.collabserv.com

Additionally, if there are multiple servers that send mail on behalf of your domain, it is important to include all of the servers in the definition.

For example, if all mail for the renovations.com domain is sent and received by the service, the SPF record only needs to identify SmartCloud Notes servers as permitted to send mail on behalf of this domain.
v=spf1 include:_spf.notes.na.collabserv.com ~all
In another example, the inbound mail is accepted by servers in the service using DNS MX records that reference the SmartCloud Notes service. But there are also SMTP servers in the on-premises environment that might send outbound mail. In this case, there is no need to additionally specify the MX mechanism in the SPF record definition because they are already defined by the included SmartCloud Notes SPF record, but all other servers sending mail on behalf of the domain must be included. If there is a single SMTP server named mail.renovations.com, the SPF record could be defined with the following value:
v=spf1 a:mail.renovations.com include:_spf.notes.na.collabserv.com ~all

Your Domain hosting service is a good source of additional information about SPF records and the syntax to use. For additional information about other mechanisms, see your Domain hosting service website or the Sender Policy Framework website at http://www.openspf.org/.