ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Can anyone point me to a good reference for SPF records

    IT Discussion
    4
    13
    2.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JaredBuschJ
      JaredBusch
      last edited by

      I was just told that some people at one client are having problem emailing certain people.
      Looking at the bounce message, it is an SPF issue. This client used Postini and recently migrated to Google as required. All of their mail is sent through Postini/Google Apps. I am certain it is simply missing an A record for smtp-relay.gmail.com. I can add that no big deal, but their current SPF is this huge long mess that I think is over complicated. I would love to be able to simplify it down a bit.

      1 Reply Last reply Reply Quote 0
      • slazer2auS
        slazer2au
        last edited by

        Hope this helps mate.

        @ IN TXT "v=spf1 mx a:[fqdn of email server eg mail.gmail.com.au] ip4:[IP address mail can be relayed from] ~all"

        JaredBuschJ 1 Reply Last reply Reply Quote 0
        • JaredBuschJ
          JaredBusch @slazer2au
          last edited by

          @slazer2au yeah, i have rebuilt it using http://www.spfwizard.net. Just not sure about the gmail relay and not seeing documentation on it.

          domain.com. IN TXT "v=spf1 a ptr ip4:XXX.XXX.239.40/29 a:smtp-relay.gmail.com ~all"

          1 Reply Last reply Reply Quote 0
          • slazer2auS
            slazer2au
            last edited by

            You don't have to use A names you can keep to IP addresses. You can use the include argument as a kind of wildcard.

            You can use MXtoolbox to check if your SPF record is correct. Just remember that some older DNS servers do not use the SPF type so you will have to use a txt record along with a SPF

            DashrenderD 1 Reply Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch
              last edited by JaredBusch

              @slazer2au This server does not send email directly. it is all relayed. I finally found it though..

              Based on your comment about the A record, i changed it to this:

              domain.com. IN TXT "v=spf1 ip4:XXX.XXX.239.40/29 include:_spf.google.com ~all"

              1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender @slazer2au
                last edited by

                @slazer2au said:

                You don't have to use A names you can keep to IP addresses. You can use the include argument as a kind of wildcard.

                You can use MXtoolbox to check if your SPF record is correct. Just remember that some older DNS servers do not use the SPF type so you will have to use a txt record along with a SPF

                What do you mean? and SPF record is a TXT record.

                1 Reply Last reply Reply Quote 0
                • scottalanmillerS
                  scottalanmiller
                  last edited by

                  No, SPF and TXT are two different record types.

                  DashrenderD JaredBuschJ 2 Replies Last reply Reply Quote 0
                  • DashrenderD
                    Dashrender @scottalanmiller
                    last edited by

                    @scottalanmiller said:

                    No, SPF and TXT are two different record types.

                    I stand corrected.
                    http://en.wikipedia.org/wiki/Sender_Policy_Framework

                    They used to be implemented as TXT records. I was unaware that they officially had their own type now.

                    1 Reply Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller
                      last edited by

                      That's why you have to do both. Some systems still don't honor the SPF record.

                      1 Reply Last reply Reply Quote 0
                      • JaredBuschJ
                        JaredBusch @scottalanmiller
                        last edited by

                        @scottalanmiller said:

                        No, SPF and TXT are two different record types.

                        But SPF is being obsoleted.
                        http://en.wikipedia.org/wiki/List_of_DNS_record_types uses a source document here: http://tools.ietf.org/html/draft-ietf-spfbis-4408bis-21 and section 3 basically states the SPF was never implmented well.

                        1 Reply Last reply Reply Quote 1
                        • scottalanmillerS
                          scottalanmiller
                          last edited by

                          Ugh. What a pain.

                          slazer2auS 1 Reply Last reply Reply Quote 0
                          • slazer2auS
                            slazer2au @scottalanmiller
                            last edited by

                            @scottalanmiller said:

                            Ugh. What a pain.

                            Yea, I had a client that we host their public DNS records. it was a pain to add TXT and SPF records to all his files.

                            1 Reply Last reply Reply Quote 0
                            • scottalanmillerS
                              scottalanmiller
                              last edited by

                              We do a lot of email consulting and have to deal with it all of the time.

                              1 Reply Last reply Reply Quote 0
                              • 1 / 1
                              • First post
                                Last post