# Should I add an SPF record for a Website that sends email

**URL:** <https://forum.dmarcian.com/t/should-i-add-an-spf-record-for-a-website-that-sends-email/1515>\
**Category:** Community Area\
**Created:** [March 26, 2021, 12:20pm UTC](https://forum.dmarcian.com/t/should-i-add-an-spf-record-for-a-website-that-sends-email/1515 "2021-03-26T12:20:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Admin1AtET](https://avatars.discourse-cdn.com/v4/letter/a/f14d63/32.png) [@Admin1AtET](https://forum.dmarcian.com/u/Admin1AtET)\
**Post date:** [March 26, 2021, 12:20pm UTC](https://forum.dmarcian.com/t/should-i-add-an-spf-record-for-a-website-that-sends-email/1515/1 "2021-03-26T12:20:15Z")

</div>

I have a hosted website that send email messages on behalf of our company from their local mail server. These messages are generated when customers fill out forms on the website and then they get a confirmation email showing sent from “ourdomain” even though it is really coming from “theirdomain”. Should I add “[theirdomain.com](http://theirdomain.com)” into my SPF record? Or would this just be opening up a hole for other spoofed email messages?

I want to make sure that email coming from this website server does not get blocked when I set the system to quarantine or deny.

Thanks in advance for your thoughts on this.

Rick

---

<div class="post-metadata">

**Author:** ![opvind](https://avatars.discourse-cdn.com/v4/letter/o/e274bd/32.png) [@opvind](https://forum.dmarcian.com/u/opvind)\
**Post date:** [April 8, 2021, 10:33am UTC](https://forum.dmarcian.com/t/should-i-add-an-spf-record-for-a-website-that-sends-email/1515/2 "2021-04-08T10:33:34Z")

</div>

Insufficient info given, so cannot advise . Try filling out a form on the website, and then analyze headers, esp. Authentication Results in the confirmation email.