An SPF record lists which mail servers are allowed to send email from your domain. Receiving servers check it, so a correct SPF record keeps your messages out of spam folders and makes it harder for others to fake email from your domain.
The SPF record for Liberation Email
| Hostname | Type | Address |
|---|---|---|
| @ | TXT | v=spf1 include:_spf.liberation.email -all |
Use this for both Liberation Email and Hub for Teams.
Important: A domain can have only one SPF record. Two SPF records break both of them. If you already have one (it starts with
v=spf1), don’t add a second: edit the existing one and add include:_spf.liberation.email before the ending -all or ~all.For example, if you also send email through a newsletter service, your single record might look like:v=spf1 include:_spf.liberation.email include:servers.mcsv.net -all
Add the SPF record
Before you start: You can only manage DNS here if your domain uses our nameservers: dns1.liberationtek.com, dns2.liberationtek.com and dns3.liberationtek.com. If the DNS Management page says "This zone is not active", your domain points somewhere else. Either change the nameservers (see Changing your domain's nameservers) or add the record where your DNS is hosted now.
- Log in to the Client Area.
- Go to Domains > My Domains and click the domain.
- In the menu on the left, click DNS Management.
- In the top row, enter the Hostname: @
- Leave TTL at 3600 (one hour) unless you have a reason to change it.
- Choose TXT in the Type list.
- Enter the Address:
v=spf1 include:_spf.liberation.email -all - Click Add Record. The record is added to the list as a pending change.
- Click Save Changes at the bottom. Nothing changes until you save.
If your DNS is hosted somewhere else, add the same TXT record there.
What does -all mean?
-all: mail from any server not listed should be rejected. This is what we recommend.~all: mail from unlisted servers is accepted but marked as suspicious. Use this only while you are still moving from another provider.
How long does it take?
Most changes work within an hour. Some networks keep the old record until its TTL runs out, so allow up to 24–48 hours before assuming something is wrong.
