How best to set up SPF record

[nim.mehta]

Note: addresses listed below should have a . instead of an _ but I was having trouble posting

Hi

We have a website set up to run through Cloudflare, we’ll call this “websitename_co_uk” for now.

We also have emails set up on “websitename_com” using Office365.

We have programmed the contact forms & order confirmation emails on the _co_uk site to be sent to and from “sales@websitename_com”.

We have set an SPF record up on the _com DNS to allow emails to be sent on the IP address of the server that _co_uk is set up on. When we disbale Cloudflare for _co_uk, emails are receieved. When Cloudflare is enabled, they are not received.

When you ping the website, the IP address that is returned is different when if it runs through Cloudflare compared to what we normally see when the website is not running through Cloudflare.

My question is, when the site is running through Cloudflare, will it always return the same IP when the address is pinged? If so, i guess we can amend/add a new spf record for the new address. If the address always changes (which I suspect it might?), what is the best way to set up the SPF record to enable sending on the emails?

Thanks

[cbrandt]

The IP address Cloudflare attributed to my website hasn’t changed since I began using CF a couple of years ago. While there’s no promise this won’t change, you have to keep in mind that the same IP address given to any website is also attributed to hundreds of other domains on Cloudlfare. So the best way would be to create your SPF policies using your .co.uk and .com domains, instead of their IP addresses.

[Withheld]

All the tools to test and configure your mail is located here.

DMARC Tools - dmarcian

and once everything is configured properly, use this tool to email a test for deliveralbility issues. https://www.mail-tester.com

[jules]

Don’t overthink it. I use this all the time - it works great:

SPF Wizard - SPF Generator DNS tool