Take the 2-minute tour ×

Suppose you have the domain yourdomain.com, and you have set the following SPF:

v=spf1 +ptr:yourdomain.com ~all

Now, I have the IP address, and I am also the administrator of 3.2.1.in-addr.arpa. I can specify

4 IN PTR fake.yourdomain.com.

and then I can send emails from my machine, pretending it's one of the yourdomain.com machines.

Is this a significant risk? Should I avoid using ptr in the SPF?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

According to wikipedia using PTR will also forward confirm the PTR (IE might resolve to fake.yourdomain.com but fake.yourdomain.com points to



share|improve this answer
Thanks. See also openspf.org/SPF_Record_Syntax for a more reliable source. –  Antonis Christofides Nov 14 '12 at 12:19

Your Answer


