Hello All,
We have a requirement for adding a third vendor in our SPF records. Basically, the third party vendor will send approval request via their environment to our environment. So they do not want their emails to be picked as Spoofed. I am not really sure whether
this should be encouraged. Currently we do not have any issues as the requests are mostly sent from our internal user address, moving forward the request will come from external users via the vendor environment. If there are any alternative options instead
of adding their domain to our SPF, please do let me know. Thanks!
Thats very normal, and alot of 3rd party vendors do this since they since are sending as you. ( I assume they are sending as your domain) You could also use DKIM, but its the same issue. There is really no reason to be concerned about it unless you dont
trust them.
Ensure that once you add their records to your SPF, it doesnt exceed 10 lookups. Check at mxtoolbox.com or the testing site of your choice.
Now having said that, if they are ONLY sending to your internal users and not to other external recipients as your domain, then their is no need to add their IPs to your SPF. Instead, simply whitelist their sending IPs at your anti-spam gateway.
