dns - Records can not be found -
issue: spf record (txt) can not retrieved dns entry of domain zwischengas.com
in dns entry have 1 line spf record (as txt entry):
@ in txt "v=spf1 ip4:188.a.b.c ip4:xyz/22 ip4:xyz/24 ip4:xyz/21 ip4:xyz/24 ip4:xyz/24" "ip4:xyz ip4:xyz/22 ip4:xyz ip4:xyz/29 ip4:xyz/29 ip4:xyz/28" "ip4:xyz/24 ip4:xyz/24 mx ?all" i have problem, spf record can not found , have no clue why. according rfc splitting long line multiple strings recommended in order keep substrings smaller 255 characters.
my domain zwischengas.com , mail server's ip 188.a.b.c, clue?
i tried these tests without success:
host -t txt zwischengas.com spfquery -ip-address 188.a.b.c -m test@zwischengas.com -h zwischengas.com also tests online tools without success:
also google mail (gmail.com) can not retrieve spf record (according original mail header section):
received-spf: neutral (google.com: 188.a.b.c neither permitted nor denied best guess record domain of noreply1@zwischengas.com) client-ip=188.a.b.c;
working solution
you can test correctness of spf record calling
host -t txt myhost.com a simple spf record this:
@ in txt "v=spf1 ip4:244.11.23.13 mx ?all" if add ips 1 after other, can end in error messages dns server saying string long.
valid solution introduce " " it.
so instead of
@ in txt "v=spf1 ip4:244.11.23.13 ip4:144.21.23.13 ip4:222.11.11.13 ip4:244.182.23.191 ip4:203.101.22.13 mx ?all" you have (an example):
@ in txt "v=spf1 ip4:244.11.23.13 ip4:144.21.23.13" " ip4:222.11.11.13 ip4:244.182.23.191" " ip4:203.101.22.13 mx ?all" the " " option described in appropriate rfc , accepted dns servers (what happens is, " " removed , substrings concatenated).
but if have 20 ips? end in string far longer allowed. can do?
the solution called: include
an example:
@ in txt "v=spf1 include:_spf1.myhost.com include:_spf2.myhost.com mx ?all" _spf1 in txt "v=spf1 ip4:244.11.23.13 ip4:144.21.23.13 mx ?all" _spf2 in txt "v=spf1 ip4:222.11.11.13 ip4:244.182.23.191 ip4:203.101.22.13 mx ?all" you can extend n hierarchies. hope helps took me time find out!!
Comments
Post a Comment