Contact Us

The Skysnag Blog

How to Set Up SPF for Zimbra?

October 11, 2023  |  2 min read

SPF records help improve email deliverability by helping to prevent email spoofing. By including an SPF record in your DNS settings, you can help to ensure that email sent from your domain is not marked as spam by email providers.

How to Set Up SPF for Zimbra

You must add the IP address of your Zimbra server to your domain’s SPF record, designating it as an authorized sending source, to ensure that emails sent using Zimbra do not fail SPF authentication on the recipient’s end.

Let’s assume for the purposes of this post that a Zimbra server’s IP address is ip4:x.x.x.x. Please change it for your Zimbra server’s specific IP address.

  • Sign in to your DNS administration interface.
  • Select DNS Template under Tools & Settings
  • You must change the DNS TXT record for SPF.
  • For Zimbra, an SPF TXT record will have the following syntax: TXT v=spf1 ip4:x.x.x.x -all

  • This record should be published in the DNS records section for the relevant domain.

Worth noting: To activate SPF for outgoing emails using Zimbra if your domain previously lacked an SPF record, all you need to do is publish the aforementioned record. If your DNS already contains an SPF record, you must update it to include Zimbra as shown below:

Previous SPF record:  v=spf1 -all

Modified SPF record:  v=spf1 ip4:x.x.x.x -all

  • Save adjustments.
  • Allow your DNS to process the adjustments for 48-72 hours.

With Skysnag, you can easily manage Zimbra’s SPF records without having to go to your DNS. This allows Zimbra’s SPF record to propagate instantly, and autonomously always pass SPF alignment.

Sign up for a free trial today to see how it works for your domain.

For more information on setting up Zimbra’s SPF, you can refer to their reference documentation.

You can use Skysnag’s free SPF Checker to check the health of your SPF record here

Check your domain’s DMARC security compliance

Enforce DMARC, SPF and DKIM in days - not months

Skysnag helps busy engineers enforce DMARC, responds to any misconfigurations for SPF or DKIM which increases email deliverability, and eliminates email spoofing and identity impersonation.