Hello,

The bulk of my incoming and outgoing mail for widget.org is through my Google Apps account I have setup for my domain. I also have CMS software installed on my site that sends out a couple emails periodically.

Widget.com setup in Google Apps so if a user accidently sends an email to widget.com instead of widget.org, it still goes through (admin@widget.com forwards to admin@widget.org). As far as mail goes, widget.com is one way only. I, and my server, will never send email from it.

I'm trying to setup my SPF records to protect myself from spam being sent out with my spoofed domain names.

Google recommends: v=spf1 include:_spf.google.com ~all

However, I'm not sure this is the most appropriate for my situation. Won't that place a heavier burden from emails from my server, and go too lightly spoofed emails from neighter Google Apps or my server?

Instead, for widget.org, I'm thinking of using: v=spf1 a mx include:_spf.google.com -all

And for widget.com I'm thinking of using: v=spf1 -all

However, because I'm new to SPF records, I wanted to solicit feedback before going live.