Can anyone point me to a good reference for SPF records
-
I was just told that some people at one client are having problem emailing certain people.
Looking at the bounce message, it is an SPF issue. This client used Postini and recently migrated to Google as required. All of their mail is sent through Postini/Google Apps. I am certain it is simply missing an A record for smtp-relay.gmail.com. I can add that no big deal, but their current SPF is this huge long mess that I think is over complicated. I would love to be able to simplify it down a bit. -
Hope this helps mate.
@ IN TXT "v=spf1 mx a:[fqdn of email server eg mail.gmail.com.au] ip4:[IP address mail can be relayed from] ~all"
-
@slazer2au yeah, i have rebuilt it using http://www.spfwizard.net. Just not sure about the gmail relay and not seeing documentation on it.
domain.com. IN TXT "v=spf1 a ptr ip4:XXX.XXX.239.40/29 a:smtp-relay.gmail.com ~all"
-
You don't have to use A names you can keep to IP addresses. You can use the include argument as a kind of wildcard.
You can use MXtoolbox to check if your SPF record is correct. Just remember that some older DNS servers do not use the SPF type so you will have to use a txt record along with a SPF
-
@slazer2au This server does not send email directly. it is all relayed. I finally found it though..
Based on your comment about the A record, i changed it to this:
domain.com. IN TXT "v=spf1 ip4:XXX.XXX.239.40/29 include:_spf.google.com ~all"
-
@slazer2au said:
You don't have to use A names you can keep to IP addresses. You can use the include argument as a kind of wildcard.
You can use MXtoolbox to check if your SPF record is correct. Just remember that some older DNS servers do not use the SPF type so you will have to use a txt record along with a SPF
What do you mean? and SPF record is a TXT record.
-
No, SPF and TXT are two different record types.
-
@scottalanmiller said:
No, SPF and TXT are two different record types.
I stand corrected.
http://en.wikipedia.org/wiki/Sender_Policy_FrameworkThey used to be implemented as TXT records. I was unaware that they officially had their own type now.
-
That's why you have to do both. Some systems still don't honor the SPF record.
-
@scottalanmiller said:
No, SPF and TXT are two different record types.
But SPF is being obsoleted.
http://en.wikipedia.org/wiki/List_of_DNS_record_types uses a source document here: http://tools.ietf.org/html/draft-ietf-spfbis-4408bis-21 and section 3 basically states the SPF was never implmented well. -
Ugh. What a pain.
-
@scottalanmiller said:
Ugh. What a pain.
Yea, I had a client that we host their public DNS records. it was a pain to add TXT and SPF records to all his files.
-
We do a lot of email consulting and have to deal with it all of the time.