Email for my domain is being processed by cloudflare (free version). Sometimes I get email that has an SPF “permerror” but the email is fowarded to the destination. Somehow I need to modify the spf record so that the email is dropped. I’ve done this before with other email providers but I can’t find a way to change this. How is this done usually?
May I ask if this is related to the Email Routing feature from Cloudflare, or rather you’d want to add SPF to the DNS for your zone?
If it’s related to the Email Routing:
Otherwise, consider cross-checking for your 3rd-party service for SPF instructions, therefrom following the steps from below article you can add a new DNS record according to it for your zone:
I just want to modify the SPF record. It currently has “~all” which allows an email that has a “permerror” to be forwarded. I need for the SPF to changed to “-all” so that the email will be dropped instead.
SPF affects mail you send from your domain. It doesn’t have anything to do with email you receive. If you want your receiving mail server to drop mail that fails SPF, you need to configure your mail server to do that, which isn’t done at Cloudflare.
