How do I configure my DNS to allow BrightPBX send email on behalf of my domain

If you have used the Branding app to customize emails sent by BrightPBX as coming from your domain, you will also need to adjust the SPF policy in your DNS to permit this, otherwise some mail servers will flag the emails as spam.

Add the SPF include

Add include:spf.brightpbx.ca to the DNS TXT record that holds your SPF definitions. A completed record looks something like this:

v=spf1 include:spf.brightpbx.ca include:_spf.google.com ~all

This allows the receiving email server to recognize that the sender is permitted to send email on behalf of your domain. If this check fails, it means there was no DNS record in your domain naming BrightPBX as a permitted sender, which will cause some receivers to treat the message as spam or a phishing attempt.

Confirming it works

Open one of the branded emails at the receiving end and view its headers. A passing message shows the BrightPBX sending server against your own domain — in Gmail, the Received-SPF or Authentication-Results header will report spf=pass for the address you set in the Branding template.