Overview
To ensure that your emails sent via ExSign are properly authenticated and not marked as spam or phishing by recipient mail servers, it's important to configure an SPF (Sender Policy Framework) record in your domain's DNS settings.
This article explains how to add the correct SPF record for ExSign and Microsoft 365 users.
What is an SPF Record?
An SPF record is a type of DNS TXT record that lists all the servers authorized to send emails on behalf of your domain. It helps prevent email spoofing and improves email deliverability by verifying the source of the outgoing emails.
Why do I need to configure it for ExSign?
When using ExSign for signature stamping, our service may relay emails on your behalf. If your SPF record does not authorize our servers, recipient mail systems may treat your messages as suspicious or unauthenticated.
By adding our SPF entry, you explicitly authorize ExSign servers to send emails from your domain, ensuring seamless delivery.
Required SPF Record for ExSign
Please add the following SPF record in your domain’s DNS settings:
v=spf1 ip4:176.9.109.217 ip4:78.46.73.118 ip4:178.63.42.70 include:spf.protection.outlook.com -all
Explanation:
- ip4:176.9.109.217 → ExSign mail server 1
- ip4:78.46.73.118 → ExSign mail server 2
- ip4:178.63.42.70 → ExSign mail server 3
- include:spf.protection.outlook.com → Microsoft 365 (if you're using Exchange Online)
- -all → Reject any server not listed above
⚠️ Important: You should have only one SPF record per domain. If your domain uses multiple services to send email, make sure to merge all sources into a single SPF record.
Steps to Add an SPF Record
Here’s how you can add the SPF record (steps may vary slightly depending on your DNS provider):
Step 1: Log in to your DNS provider
Access the DNS management portal of your domain registrar (e.g., GoDaddy, Namecheap, Cloudflare, etc.).
Step 2: Add a TXT record
- Type: TXT
- Name / Host: @ (or leave blank depending on your DNS host)
- Value:
- v=spf1 ip4:176.9.109.217 ip4:78.46.73.118 ip4:178.63.42.70 include:spf.protection.outlook.com -all
Step 3: Save the changes
Save the record and allow some time for DNS propagation (usually within a few hours).
How to Test SPF Record
You can verify your SPF record using these tools:
Just enter your domain name and check whether your SPF record is valid and correctly configured.
Troubleshooting Tips
- Avoid multiple SPF records: Merge all authorized senders into one record.
- Using additional services (e.g., Google, Mailchimp)? Add them using include: mechanisms.
- Too many lookups? SPF allows a maximum of 10 DNS lookups. Optimize your record to stay within this limit.
Conclusion
Adding the correct SPF record for ExSign helps ensure your emails are delivered securely and reliably. It also prevents spoofing and helps maintain your domain’s reputation.