Hi, >> T_SPF_PERMERROR says pretty clear that you made something wrong >> why do people not *verify* DNS changes? seen the same from a >> lot of large companies >> >> http://www.kitterman.com/spf/validate.html >> > +1 for the Kitterman checking tool - still my first stop for SPF > checking. > > I recently found out about another: https://dmarcian.com/spf-survey/ > which is also worth using.
Yes, I'm aware of this site. Perhaps I shouldn't have introduced the T_SPF_PERMERROR issue because it's not really my main problem, and doesn't even occur on my own domain. I wish I could post my domain, but I can't. My main problem is understanding how to build a rule to block spoofing attempts against my own domain? Do I need to build a meta that combines envelope FROM with SPF_FAIL? Thanks, Alex