So Sender Policy Framework is an email validation protocol that is designed to detect and block email 1
spoofing by providing a mechanism to allow the mail exchanges to verify that the domain that send the 2
e-mail address is basically allowed to use the IP address to send that particular e-mails. 3
So what SPF does here is that it ensures that the domain from where the e-mail came from is allowed 4
to send e-mails using this particular IP address. 5
If this validation fails it means that the e-mail is getting sent from an IP address which is not authorized 6
to use the particular domain to send the e-mail. 7
This is what SPF checks for. 8
And if that particular checks fail then the e-mail exchange gives it a spam indicator that this e-mail 9
might be suspicious. 10
So Sender Policy Framework cross validates that the domain from where 11
This email has been sent. 12
It's actually registered with the correct IP address 13
from there the e-mail came. If the match fails the e-mail client automatically says that the SPF check 14
has failed. 15
And this is why this e-mail was deemed suspicious. 16
You can read a bit more about Sender Policy Framework and how it helps in categorizing whether an e-mail 17
is spam or not. 18
I'll be adding the next exercise on SPF into this video as well. 19
So this is how we can understand and analyze spam emails by looking at the e-mail headers. 20
Now in the next few videos we are going to give a deeper look into the malicious attachment that comes 21
with these spam emails. 22
So that's it for this video. 23
Thanks a lot for watching.