We virtual host (as well as store/forward) for a lot of domains.  It is
a given to add SPF support, I need to setup records for the main IP and
name of our servers.  However, what about all the virtuals?

SPF doesn't know or care whether a domain is virtual or "real". So:

Do I only need to setup SPF records for those domains that we actually
host/control their DNS?

That's up to you. You can publish SPF records for any/all of the domains that you control the DNS for (and your users can add SPF records themselves if you do not control the DNS).


We also have internal DNS servers for routing
email (using BIND) between internally NAT'd servers, do I need to
publish SPF records for those as well.  Thanks for the clarify.

You don't need to publish SPF records for those, because SPF looks at the return address of the E-mail and compares it to the IP that the E-mail came from. You can only publish SPF records for domains, not mailservers.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to