Method and System for Optimizing and Preventing Failure of Sender Policy Framework (SPF) Lookups

• US 20170093772A1
• Filed: 09/26/2016
• Published: 03/30/2017
• Est. Priority Date: 09/25/2015
• Status: Active Grant

• Current Assignee: Amit Gupta
• Original Assignee: Amit Gupta
• Inventors: Gupta, Amit
• Granted Patent: US 10,447,633 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2101/35 containing special prefixes
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/566 Grouping or aggregating service requests, e.g. for unified processing

Abstract

The present invention circumvents the standard SPF lookup limit by allowing an administrator to create a secondary SPF record that includes all the desired SPF records even if it exceeds the 10 recursive lookups that would result in a standard failure. The administrator would then then create or modify their main SPF record to include an entry that points to the SPF Proxy that is the subject of this invention.

Claims

1. A method for optimizing and preventing failure of sender policy framework (SPF) lookups recorded on non-transitory computer-readable medium and capable of execution by a computer, the method comprising the steps of:

requesting a regular SPF Record;

receiving a SPF Record that points to a Proxy Server (SPF Proxy Record);

conditionally checking a Proxy DNS entry based on merged SPF Macros;

performing an SPF authentication check based on the conditionally received DNS record; and

returning a Synthetic SPF response that incorporates the results of the SPF check in a format that adheres to the SPF standard and whose result would match the SPF check result even without DNS lookup limits

2. The method of claim 1, further comprising the step of:

changing the required behavior of the SPF check by increasing the DNS lookup limit.

3. The method of claim 1, further comprising the step of:

using a cached response from a previous lookup that matches completely.

4. A method for optimizing and preventing failure of sender policy framework (SPF) lookups recorded on non-transitory computer-readable medium and capable of execution by a computer, the method comprising the steps of:

sending an email from a mail server;

the email contains one or more properties that will be used for SPF Macros;

attempting to do an SPF validation using email domain'"'"'s SPF record;

making a DNS request;

responding with an SPF Proxy Record;

processing the Macro'"'"'s in the returned Proxy Record;

generating a DNS TXT request to the domain'"'"'s SPF proxy;

receiving the request and extracts the merged macro'"'"'s;

looking up the Canonical SPF Record from the email domain'"'"'s DNS server by making a request;

conducting a standard SPF validation; and

constructing a synthetic response record based on the results from step 6 which acme.com can use to do a simple check

5. The method of claim 4, wherein the email can be from the actual mail server for the domain or a third party email provider.

6. The method of claim 4, wherein the canonical record can be determined by an optional or required “

selector”

contained within the proxy record.

7. The method of claim 4, wherein the synthetic record can contain a single block of IPs or a single included SPF entry.

8. The method of claim 7, wherein the synthetic record can contain a single included SPF “

exists”

entry or “

redirect”

entry.