hi thanks for your tutorial. please am in a situation whereby my email is hosted by googleworkspace and I want add sendinblue spf to the gooleworkspace spf. how do I do it. i have added it to my domain DNS and is showing multiple spf.
Hi Niyaz, Hope you are doing great. I am using on premise Exchange 2010 with Barracuda Email Security Gateway (ESG). SPF option is enabled on Barracuda ESG and SPF also configured perfectly on Alibaba DNS. I have setup and blocked invalid email in HUB Transport Anti-Spam. I have two following queries for you. 1. I have enabled Anti-Spam feature on HUB Transport since I am not using EDGE. Is there any negative impact if I also enable SPF option in Anti-Spam feature on HUB Transport? 2. My internal users are receiving scam/spam emails where email sender is also from my internal domain user but "mailto:" address in email body is unknown and outsider. In such scam or spam email they are using Email Signatures of my original domain users and asking from click here to confirm your security info or delivery info etc etc... How I can stop such spam emails?
SPF helps your recievers to identify mails are coming from authorized servers. Anti Spam helps you to filter inbound spam emails for your organisation. Enable both doesn't go wrong
The only thing i understand is spf tries to pretend and spoofs your domain name whereas actually u have never send any such mail to recipient.By adding spf record henceforth if any spam mails comes .It will first try to match with dns servers and if it didn,t match it will directly go to junk folder.In this way.🤔🤔🤔
very good , but i have a problem i don't understand why there is soft fail and hard fail , as i understand that the best option is -all this mean only the mx or my ip which i added only will send and drop other and that's good for everyone and prevent relay and hacking and so on , SO why and when we can use ~all ...could you plz explain?
“+” for pass (this is the default if no qualifier is explicitly provided) “-” for fail (email from unauthorized hosts should be rejected) “~” for SoftFail (may result in email being accepted but marked as “likely spam”) “?” for Neutral (regardless of the result the email should be accepted) ~ it is not a recommended, - always use to fail. ~ it is good to put for a period of time if you are in the middle of migration or If you are switching to a new DR.
Hi Niyaz, I have old exchange 2010 server on premise for emails. We have decided to go for Office365 hybrid migration but problem is this exchange server is very old and playing with it or upgrade it can cause lots of issues. We have decided to bring in Exchange 2016 server for hybrid configuration/mailbox migration. Could you please guide me process of things I need to configure to setup hybrid exchange? Or would you be able to make a video on this? Thanks Randhir
Hi Niyaz, Thanks very much for pointing me in right direction. I would like to build exchange 2016 server only for the purpose of migrating mailboxes to office365. I have couple of question: 1) Do I need to move mailbox from 2010 DB to 2016 DB 2) Does Office365 hybrid utility will automatically configure send and receive connectors Thanks Regards Randhir
@@randhirsingh5808 2 A) Send and receive connectors required for hybrid migration is configured by hybrid configuration wizard, You need to open the ports between your exchange server and Office 365 IP addresses. 1 A) How many users do you have ? What is the size of Mailbox database?
@@itproguide Hi Niyaz, Thanks very much for taking time to reply. We have 250 plus users with minimum mailbox size of 2 GB but we also have users with 20 GB mailbox as well.
There is a lookup limit of 10 entries, so you need to ensure that you consolidate your sending sources within this lookup limit. If it is a case you need to enter multiple entries for an SPF TXT record, for a domain, it is suggested that you split the record up intomultiple smaller records.
@@itproguide Alright, actually I have created my own SMTP provider on Windows Server 2016 about a while ago, then it works very well and I don't have any problem except the delivery status, I got the emails into the JUNK folder. I asked a friend to solve this problem but he told me that I need to set the SPF, RDNS, MX-Records to get a high rate of email delivery, I hope to find me a right solution for this issue :)
@@mememoons SPF and DKIM are the solutions to protect your domain from email spoofing, So that your receivers doesn't get cheated as your emails are only considered from the authorized/permitted receivers. This will also helps you to stop receiving email from your domain generated from Spammers servers. But your question is different, "You are receiving a lot of email to JUNK folder" It means you need a system to verify or validate SPF and DKIM for inbound emails. So if you have edge device then enable Anti-spam or install any anti-spam like Trend Micro. This validate and categorize email properly
hi thanks for your tutorial. please am in a situation whereby my email is hosted by googleworkspace and I want add sendinblue spf to the gooleworkspace spf. how do I do it.
i have added it to my domain DNS and is showing multiple spf.
Hi Mohammad, I have a scenario in which my SPF ,DMARC,DKIM are in Proofpoint. I want to migrate my service to O365 , what should i do ?
Thanks for the explanation really helpfull for my interview.
Very helpful tutortial. Thank you for taking the time to show us this.
Informative video man.Appreciate
Hai sir,how to go dns manager?
please explain that.......
If we have multiple ips for the domain ,..how can we add for spf ..
Great Video, Thank you Mohammed for sharing the knowledge
where would I find the IP address that delivers my emails?
Learnt so much from this video. Great work!
Glad to hear it!
Hi Niyaz,
Hope you are doing great.
I am using on premise Exchange 2010 with Barracuda Email Security Gateway (ESG). SPF option is enabled on Barracuda ESG and SPF also configured perfectly on Alibaba DNS. I have setup and blocked invalid email in HUB Transport Anti-Spam. I have two following queries for you.
1. I have enabled Anti-Spam feature on HUB Transport since I am not using EDGE. Is there any negative impact if I also enable SPF option in Anti-Spam feature on HUB Transport?
2. My internal users are receiving scam/spam emails where email sender is also from my internal domain user but "mailto:" address in email body is unknown and outsider. In such scam or spam email they are using Email Signatures of my original domain users and asking from click here to confirm your security info or delivery info etc etc... How I can stop such spam emails?
SPF helps your recievers to identify mails are coming from authorized servers. Anti Spam helps you to filter inbound spam emails for your organisation. Enable both doesn't go wrong
The only thing i understand is spf tries to pretend and spoofs your domain name whereas actually u have never send any such mail to recipient.By adding spf record henceforth if any spam mails comes .It will first try to match with dns servers and if it didn,t match it will directly go to junk folder.In this way.🤔🤔🤔
Do I need to add the spf record into both the local and external dns?
External DNS only required
very good , but i have a problem i don't understand why there is soft fail and hard fail , as i understand that the best option is -all this mean only the mx or my ip which i added only will send and drop other and that's good for everyone and prevent relay and hacking and so on , SO why and when we can use ~all ...could you plz explain?
“+” for pass (this is the default if no qualifier is explicitly provided)
“-” for fail (email from unauthorized hosts should be rejected)
“~” for SoftFail (may result in email being accepted but marked as “likely spam”)
“?” for Neutral (regardless of the result the email should be accepted)
~ it is not a recommended, - always use to fail. ~ it is good to put for a period of time if you are in the middle of migration or If you are switching to a new DR.
@@itproguide ok but ~ can make anyone create exchange with my domain name and send emails by my name is this right?
@@Eslam.Basyouni yes, it is just a choice and not recommended.
@@itproguide thank you Mohammed
Hi Niyaz,
I have old exchange 2010 server on premise for emails. We have decided to go for Office365 hybrid migration but problem is this exchange server is very old and playing with it or upgrade it can cause lots of issues. We have decided to bring in Exchange 2016 server for hybrid configuration/mailbox migration.
Could you please guide me process of things I need to configure to setup hybrid exchange?
Or would you be able to make a video on this?
Thanks
Randhir
th-cam.com/video/M_NZlUOZmwg/w-d-xo.html
Follow above link for exchange server migration from 2010 to 2016.
The follow below for hybrid migration
th-cam.com/video/OzbpkY3_49Y/w-d-xo.html
Hybrid Migration
Hi Niyaz,
Thanks very much for pointing me in right direction. I would like to build exchange 2016 server only for the purpose of migrating mailboxes to office365. I have couple of question:
1) Do I need to move mailbox from 2010 DB to 2016 DB
2) Does Office365 hybrid utility will automatically configure send and receive connectors
Thanks
Regards
Randhir
@@randhirsingh5808 2 A) Send and receive connectors required for hybrid migration is configured by hybrid configuration wizard, You need to open the ports between your exchange server and Office 365 IP addresses.
1 A) How many users do you have ? What is the size of Mailbox database?
@@itproguide Hi Niyaz,
Thanks very much for taking time to reply. We have 250 plus users with minimum mailbox size of 2 GB but we also have users with 20 GB mailbox as well.
How to migrate on premises exchange mailboxes to office 365
Office 365 - Hybrid Migration: th-cam.com/play/PLJ9-xHCIEm7N11QZeZK7qyQ8yOKzmTb7z.html
You get complete step by step guide here
Can we create multiple spf record in single email domain ?
If not how many maximum ips are allowed in spf ?
Yes, You can create multiple IPs or you can give an entire range of IP also
@@itproguide what about multiple SPF record ? Can we have ?
There is a lookup limit of 10 entries, so you need to ensure that you consolidate your sending sources within this lookup limit. If it is a case you need to enter multiple entries for an SPF TXT record, for a domain, it is suggested that you split the record up intomultiple smaller records.
@@Allin-hu6rf help.blacknight.com/hc/en-us/articles/212512389-Creating-large-SPF-records-with-many-entries?mobile_site=true
Niaz bhai it is possible can i like same vdo multiple time...Perfect explanation thanks alot
Glad to hear that, You are welcome,
very knowledgable.
Can I hire you for consulting?
Well explained
Thank You
Sender Policy Framework
Texture code you enter into your dns
Office 365 - Hybrid Migration: th-cam.com/play/PLJ9-xHCIEm7N11QZeZK7qyQ8yOKzmTb7z.html
Perfect .
thank you
Man I need help in SPF and MX Records creation
Write your infrastructure details
@@itproguide Alright, actually I have created my own SMTP provider on Windows Server 2016 about a while ago, then it works very well and I don't have any problem except the delivery status, I got the emails into the JUNK folder. I asked a friend to solve this problem but he told me that I need to set the SPF, RDNS, MX-Records to get a high rate of email delivery, I hope to find me a right solution for this issue :)
@@mememoons SPF and DKIM are the solutions to protect your domain from email spoofing, So that your receivers doesn't get cheated as your emails are only considered from the authorized/permitted receivers. This will also helps you to stop receiving email from your domain generated from Spammers servers. But your question is different, "You are receiving a lot of email to JUNK folder" It means you need a system to verify or validate SPF and DKIM for inbound emails. So if you have edge device then enable Anti-spam or install any anti-spam like Trend Micro. This validate and categorize email properly
@@itproguide I got you, but can you access my device by Any Desk software to create these records my friend?
thanks bro
You are welcome
Handsome
Hi