SPF setup

[mickalo]

Hello,

we recently started added SPF policies to our account DNS zone files. So far it seemed to be working fine, then today I got this from a customer:

A message that you sent could not be delivered to one or more of its recipients. 
This is a permanent error. The following address(es) failed:

[email protected]
SMTP error from remote mailer after MAIL FROM:<[email protected]> SIZE=7038:
host smtp.secureserver.net [64.202.166.12]: 554 refused mailfrom because of SPF policy

Their SPF record in the eftdigest.com DNS zone file:

etfdigest.com.	14400	IN	TXT	"v=spf1 a mx -all"

Is there something else we need to add or change?

TIA,
Mickalo

 

[morfargekko]

I think that You need to add the servers IP aswell.

This is the way (I think):
etfdigest.com. 14400 IN TXT "v=spf1 ip4:xxx.xxx.xxx.xxx a mx ~all"

 

[mickalo]

I think that You need to add the servers IP aswell.

This is the way (I think):
etfdigest.com. 14400 IN TXT "v=spf1 ip4:xxx.xxx.xxx.xxx a mx ~all"

your referring to the server's ip where the DNS zone file resides on ?

Mickalo

 

[morfargekko]

Yes as I understand, You can find instructions on http://www.openspf.org/ and http://new.openspf.org/Introduction , and check that all is OK at http://www.dnsreport.com/

It worked for me.

 

[mickalo]

Yes as I understand, You can find instructions on http://www.openspf.org/ and http://new.openspf.org/Introduction , and check that all is OK at http://www.dnsreport.com/

It worked for me.

Ok, thanks. I have been reading through this earlier, gets a bit confusing but we'll give it a try.

thx's for the info

Mickalo

 

[freedog96150]

Doesn't help that the standard is not set. It was not too long ago where it was acceptable to use either ip: or ip4: to denote the ip address. Now many tests are failing the ip: notation and requiring the ip4: notations. Guess all we can do is stay on top of the changes and change our templates as the standard evolves.