Check your Sender Policy Framework (SPF)
31 Jul 2020I have created an easy tool to check your email SPF configuration (what is specified in your DNS config about what servers can send email for your @domain email addresses).
Sender Policy Framework (SPF) is an email authentication method designed to detect forging sender addresses during the delivery of the email
Wikipedia
SPF is basically a recursive list, implemented through DNS TXT records, that define all the IPv4 and IPv6 servers that are allowed to send emails for your domain. If someone (e.g. a spammer/phisher) tries to send an email from a different server that claims to be from your ceo@yourcompany.com , the receiving mail server (the one specified in your MX records) can check where it came from, and if the sending server was not in that SPF list of allowed IP addresses, the email will be regarded as suspect (and probably blocked).
If your company email is running on Office365, you should see the SPF record spf.protection.outlook.com. This means that Microsoft’s Office365/Outlook servers can send email for you. If you send emails through either the online Outlook, or the app Outlook on your PC/Mac, the emails will always go through an outgoing SMTP server on that SPF list.
If you click through, you’ll see that spf.protection.outlook.com is defined as “v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/48 include:spfd.protection.outlook.com -all“
If you use external services that send emails on your behalf (newsletters, CRM, invoicing, …) you should see an extra entry in your SPF TXT record for each of those.
