Internet Domain/DNS: ProofPoint MX and SPF alignment
C
Chris Billett
This metric evaluates whether a domain is correctly configured for ProofPoint email filtering by checking both DNS MX records and SPF authorization a:dispatch-us.ppe-hosted.com or include:_spf-us.ppe-hosted.com.
Metric attached in txt file due to formatting and spacing issues upon forum save
Domains fall into one of four states based on their MX and SPF configurations:
- “ProofPoint MX records and SPF configured correctly”
Domain has ProofPoint MX records (mx1-us1 or mx2-us1).
SPF record correctly includes a:dispatch-us.ppe-hosted.com or include:_spf-us.ppe-hosted.com.
- “Review - SPF needs ProofPoint addition”
Add ProofPoint’s SPF mechanism to authorize outbound mail via ProofPoint (or ensure correct routing).
- “Review - MX and SPF misalignment”
Domain does NOT have ProofPoint MX records.
But SPF does include ProofPoint’s .
Possible stale configuration or incomplete ProofPoint removal.
- “Not a ProofPoint domain”
No ProofPoint MX records found.
No ProofPoint SPF mechanisms present.
No action required unless the client should be on ProofPoint.
