SPF help please

[booher]

Hello everyone,

E-Mails coming from my server have been going to the spam box on many e-mail providers, so i decided to look into how to fix this. Turns out my SPF wasn't enabled, so i go through and enable it, and when i went to test it a couple hours later using Port25's authentication verifier, and it still says the SPF failed. What am i doing wrong? It is really starting to bother me, lol.

...

==========================================================
Summary of Results
==========================================================
SPF check:          fail
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    fail
SpamAssassin check: ham

...

[mtindor]

Do a simple check [using a remote resolver] to see if the authoritative nameservers are serving up any SPF record at all.

If your domain is "example.com" then, from commandline, do something like:

dig example.com txt @name_of_authoritative_nameserver

It should yield something like:

;; QUESTION SECTION:
;example.com. IN TXT

;; ANSWER SECTION:
example.com. 14400 IN TXT "v=spf1 a mx ip4:x.x.x.x a:server.blah.com ip4:y.y.y.y ?all"

If you do see what appears to be a valid SPF entry [TXT record] when querying the authoritative nameserver, then try doing the same via a public resolver.

dig example.com txt @resolver.qwest.net (a popular public resolver)
dig example.com txt @8.8.4.4 (a Google resolver)
dig example.com txt @8.8.8.8 (a Google resolver)

You should see similar results.

If those tests indicate that an SPF record is indeed in place, then perhaps the local resolver that you're using is just delivering stale DNS info.

If you don't see a TXT record when you query the authoritative nameservers, then that would be a problem. You might have an error in the syntax of your SPF data in the TXT record causing it to not be added to the DNS zone.

It's hard to help you diagnose without more information, but you don't want to put your information out for public display.

You don't know me, and thus you can't trust me from adam. But feel free to PM me the name of the domain you're attempting to set up SPF for and I'll attempt to help you troubleshoot.

Mike

[booher]

The SPF is working fine now, guess it needed a couple more hours to resolve? Still having problems with the DomainKeys check, it's at neutral with the same output as above.

Edit: nevermind, appears whoever approved my post removed the rest of the email, which did have some debug stuff in it, oh well.

DomainKeys result: neutral

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified: header.From=jbooher@yumsoft.org
DNS record(s):

any ideas?

[mtindor]

DomainKeys was dropped in favor of DKIM. So you shouldn't expect to see a "pass" for the DomainKeys check.

Mike

[booher]

DomainKeys was dropped in favor of DKIM. So you shouldn't expect to see a "pass" for the DomainKeys check.

Mike

Ah, i didn't know that. Thanks.

It appears e-mails are still sending to spam on GMail. My server isn't on any blacklists, any suggestions?