PKP/Bug Fixes/SPF - Revision history

Hgibson: /* What is the SPF? */

2016-09-01T15:43:31Z

What is the SPF?

2016-09-01T15:42:59Z

What is the SPF?

2016-09-01T15:41:07Z

How does the SPF work?

2016-09-01T15:40:16Z

What is the SPF?

2016-09-01T15:39:57Z

Introduction

2016-09-01T15:39:15Z

2016-08-08T13:39:25Z

Help Links

2016-08-08T13:39:10Z

References

2016-06-11T12:46:45Z

Federated System Setup

2016-06-11T12:45:24Z

Individual Journal Setup

@@ Line 12: / Line 12: @@
 "Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators.[1] The list of authorized sending hosts for a domain is published in the Domain Name System (DNS) records for that domain in the form of a specially formatted TXT record. Email spam and phishing often use forged "from" addresses, so publishing and checking SPF records can be considered anti-spam techniques."
-<font color="red"><big>'''Basically EVERY sending email domain MUST have a DNS text SPF record that contains the authorised IP addresses or sub-domains that are the official sending email servers for that domain otherwise delivery email servers will refuse to deliver the email.'''</big></font>
+<font color="red"><big>'''Basically EVERY sending email domain MUST have a DNS text SPF record that contains the authorised IP addresses or sub-domains that are the official sending email servers for that domain, otherwise delivery email servers will refuse to deliver the email.'''</big></font>
 ==How to check for a DNS text SPF record==

@@ Line 12: / Line 12: @@
 "Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators.[1] The list of authorized sending hosts for a domain is published in the Domain Name System (DNS) records for that domain in the form of a specially formatted TXT record. Email spam and phishing often use forged "from" addresses, so publishing and checking SPF records can be considered anti-spam techniques."
-<font color="red"><big>'''Basically EVERY sending email domain MUST have a DNS text SPF record otherwise delivery email servers will refuse to deliver the email.'''</big></font>
+<font color="red"><big>'''Basically EVERY sending email domain MUST have a DNS text SPF record that contains the authorised IP addresses or sub-domains that are the official sending email servers for that domain otherwise delivery email servers will refuse to deliver the email.'''</big></font>
 ==How to check for a DNS text SPF record==

@@ Line 14: / Line 14: @@
 <font color="red"><big>'''Basically EVERY sending email domain MUST have a DNS text SPF record otherwise delivery email servers will refuse to deliver the email.'''</big></font>
-==How does the SPF work?==
+==How to check for a DNS text SPF record==
 To determine if there is an SPF record for a sending domain, use the "dig" command as per example below in a terminal;
   dig txt sun.ac.za

← Older revision		Revision as of 15:40, 1 September 2016
Line 11:		Line 11:

	"Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators.[1] The list of authorized sending hosts for a domain is published in the Domain Name System (DNS) records for that domain in the form of a specially formatted TXT record. Email spam and phishing often use forged "from" addresses, so publishing and checking SPF records can be considered anti-spam techniques."		"Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators.[1] The list of authorized sending hosts for a domain is published in the Domain Name System (DNS) records for that domain in the form of a specially formatted TXT record. Email spam and phishing often use forged "from" addresses, so publishing and checking SPF records can be considered anti-spam techniques."
		+
		+	<font color="red"><big>'''Basically EVERY sending email domain MUST have a DNS text SPF record otherwise delivery email servers will refuse to deliver the email.'''</big></font>

	==How does the SPF work?==		==How does the SPF work?==

@@ Line 4: / Line 4: @@
 ==Introduction==
 To combat spam and email phishing a new email system called the "Sender Policy Framework" (SPF) is being adopted world wide by academic institutions and others. This is a very recent development and therefore OJS systems must be retroactively configured to support SPF. This wiki page documents these efforts at Stellenbosch University Library.
 ==What is the SPF?==

@@ Line 210: / Line 210: @@
 *http://www.jscape.com/blog/smtp-vs-imap-vs-pop3-difference
 ==Help Links==
-*https://pkp.sfu.ca/wiki/index.php/PKP_Frequently_Asked_Questions#Emails_aren.27t_being_received_by_users.2C_or_I_am_encountering_Sender_Policy_Framework_.28SPF.29_validation_issues_on_sending_email.3B_what_should_I_do.3F Read the PKP FAQ about SPF]
+*[https://pkp.sfu.ca/wiki/index.php/PKP_Frequently_Asked_Questions#Emails_aren.27t_being_received_by_users.2C_or_I_am_encountering_Sender_Policy_Framework_.28SPF.29_validation_issues_on_sending_email.3B_what_should_I_do.3F Read the PKP FAQ about SPF]
 *https://pkp.sfu.ca/support/forum/viewtopic.php?f=8&t=14082&p=53456&hilit=spf#p53456
 ==References==
 *http://www.openspf.org
 *http://www.openspf.org/SPF_Record_Syntax
 *https://tools.ietf.org/html/rfc7208

@@ Line 150: / Line 150: @@
 #Therefore sending email address = no-reply@journals.ac.za
 #Therefore ''"default_envelope_sender = no-reply@journals.ac.za"''
-See sample OJS config below;
+See sample section of OJS config file below;
 <pre>
 ; Allow envelope sender to be specified

@@ Line 185: / Line 185: @@
 ==Individual Journal Setup==
-In addition each journal must be setup as follows;
+In addition each journal must be setup as follows (applies to OJS versions => 2.4.8);
 ''The central email address to be used by default would be the one provided in '''Journal Setup Step 1.2: Principal Contact''', which should match the domain name from which the journal sends mail. (If this email address cannot match the sending domain on a per-journal basis, an alternate email address can be configured at the site level via the OJS config.inc.php file)''