This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 1%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Hello Team
people in my partner organization would like to send email from my domain name
like Abc.com is my domain and xyz.com is my partner domain. they want to send email as username@jaswant .com
and i dont want to allow their Public IP to whitelisted in ABC.com. instead i would go SPF or DKIM.
Since SPF and DKIM is new to me. i am interested to implement either SPF or DKIM . could you please assist me on this
Hi @Ramki
Add the sending IP Addresses of the partner domain's mail servers to ABC.COM 's SPF record in external DNS and that will authorize those servers to send as ABC.COM
Make sense?
Hello @Andy David - MVP
Exactly its make sense., i can add the Sending IP address of partners mail servers in my ABC' .com SPF ( external DNS). it shd work.
Howecevr, the below scenerio, i have not tested.
Assume, i have not added theri IP in MY SPF, and what happen when they try to send email from ABC.com from their email service. will get any NDR?
or will go to junk folder or they cannot send email.
Another thing , After added the sending IP address of partners mail servers in my ABC' .com SPF ( external DNS). should i create any rule to allow then
Hi @Ramki ,
If you dont add their IPs to your SPF, the message will likely not be delivered and end in junk or quarantine, yes. It could be rejected by some recipients as well.
If they are spoofing your domain and sending to your domain as well, you should probably add a transport rule to allow them based on the sender and the sending IP address, yes.
Excellent update thanks for your help.
In this situation, SPF or DKIM isn't used to verify the email sent from xyz.com to your domain. Because the email is sent from your server rather than your partner. The SPF is used to prevent email be blocked on recipient mail server.
When xyz.com relay email from your organization, the SPF is used to prevent email(relay from your Exchange server) be blocked on other mail server rather than mail server.
If you want to deploy SPF, you can follow those two article(one for Exchange online and other for Exchange on-premises). For more additional information, you can confirm with your DNS provider:
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@KyleXu-MSFT
Thanks for your update. So SPF or DKIM is not useful when they are using their email server to send emails as ABC.com
what if they are using any email services like applications which support SPF or DKIM where they want to send as ABC.com
if their application s not support for DKIM, how to get things worked out