All Questions
Tagged with domain-name-system spf
249
questions
3
votes
1
answer
635
views
SPF record in DNS sending via Gmail
I have an old domain that I want to re-purposes for a new website which will send emails. I'm using Asp.Net Core, if that makes a difference (I do not think it does). I've written several apps that ...
- 131
0
votes
0
answers
51
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS ...
0
votes
1
answer
314
views
Gmail adds multiple SPF records
When I connected my domain to gmail, it added two records to my DNS:
TXT
@
v=spf1 include:dc-aa8e722993._spfm.mydomainhere.com ~all
TXT
dc-aa8e722993._spfm
v=spf1 include:_spf.google.com ~all
But ...
- 103
0
votes
1
answer
59
views
Mail server running on a subdomain - how could email acceptance by other servers be influenced by dns records for different ips?
I started to run a self-hosted mail server which I want to be reachable via a subdomain only. I have an A record for mail.sub.domain.tld and an MX record for sub.domain.tld /edit: which points to mail....
- 23
0
votes
2
answers
163
views
Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails
I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is ...
- 165
5
votes
2
answers
890
views
Does adding another TXT record affect SPF authentication?
I am using multiple mail services for my domain sliver.proteuslake.asia, such as Mailjet, Google, and Atlassian. I have already added three TXT records for my domain:
"v=spf1 include:spf.mailjet....
- 153
0
votes
1
answer
252
views
Confused About Why SPF Needs My Email Apps Domain
FYI:
we have a custom domain and we pay for Google Workspace to use that domain for our email/gmail.
i have SPF, DKIM, & DMARC all setup, and a Google tek support person verified it was correct ...
- 111
0
votes
2
answers
210
views
Root domain in SPF record instead of full hostname
Can i use root domain like google.com instead of _spf.google.com in SPF record?.
My SPF record
v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com include:mxsmtp.sendpulse.com +a +mx ~all
...
1
vote
1
answer
312
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 33
0
votes
1
answer
39
views
Are SPF records checked depth first or breadth first (or something else)
We have a domain which has 11 includes; so is failing SPF validation as it's gone over the limit.
Most of the lookups are for third party resources, so flattenning the SPF record isn't ideal; we'd ...
- 1,278
7
votes
3
answers
2k
views
Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail
Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail.
When I "View Original Message" in GMail, I see...
SPF: NEUTRAL with ...
- 181
0
votes
1
answer
682
views
Publishing Exchange Server public IP address in a hybrid Exchange setup?
I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup.
I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
- 1,295
7
votes
2
answers
1k
views
How can I create and update the existing SPF record to allow more than 10 entries?
How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record?
I wanted to add these two:
include:mailgun.org
include:sendgrid.net
This is my ...
- 1,295
0
votes
1
answer
735
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
1
vote
1
answer
3k
views
Email DNS Setup: How do I make HELO publish an SPF record? SPF_HELO_NONE - SPF: HELO does not publish an SPF Record
My environment: hMailServer 5.6.8 on Windows Server 2022 Standard
Let's say I have two domains (I don't really own these domains, they're just examples), www.myblog.com and www.mailserver.com. They ...
- 133
-1
votes
1
answer
790
views
Setup bind9 dns for setup DKIM and SPF records [closed]
Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
3
votes
3
answers
606
views
How to set up DNS settings with a domain in the middle for DKIM and SPF?
I am working on a tool that helps the users send emails. I plan on using an MTA (Mail Transfer Agent) in the back end like AWS-SES or Sendgrid etc. In order for the emails to arrive successfully in ...
- 135
0
votes
2
answers
962
views
send email from another server than FROM domain without being marked as spam
I want to send a mail from a website. The mail server from this domain is not publicly reachable, so I can't use that to send the mail.
The webserver that hosts the website has another email server ...
- 101
0
votes
0
answers
1k
views
How to combine multiple SPF domains, one with an mx mechanism?
I combined 3 SPF records using the standard protocol, but got a null error after combining them.
Individual records:
v=spf1 include:spf.sendinblue.com mx ~all
v=spf1 include:dc-aa8e722993._spfm....
0
votes
1
answer
279
views
How do I add individual mail-sending websites to my SPF record?
My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS:
v=spf1 include:_spf.google.com include:_spf.salesforce.com
include:...
- 1
2
votes
1
answer
165
views
What's the endpoint running at `include:spf.example.com` as seen in an SPF record in DNS?
How can I run an SPF include endpoint for my organisation?
In this example, the SPF record for a domain permits hosts included via the spf.example.com list, and prohibits everything else:
"v=spf1 ...
- 123
1
vote
2
answers
667
views
How to create SPF records for my subdomains pointing to services hosted on Azure
I have a webapp running on Azure and use Google Domains for the domain name (mywebapp.com) and DNS. Azure automatically generates URLs for different resources/services (e.g: https://black-cat-12345....
- 113
5
votes
1
answer
5k
views
why is this DMARC failing verification?
I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3).
* Your DKIM signature is valid
* Your message failed the DMARC verification
A DMARC policy ...
- 153
0
votes
1
answer
260
views
Google SPF fails with some IPs
GMail MX are
ASPMX.L.GOOGLE.COM: 1
ALT1.ASPMX.L.GOOGLE.COM: 5
ALT2.ASPMX.L.GOOGLE.COM: 5
ASPMX3.GOOGLEMAIL.COM: 10
ASPMX2.GOOGLEMAIL.COM: 10
When checking for IPs for these names, each time your ask ...
- 113
0
votes
0
answers
168
views
issue with SPF records for website hosted on GCP
I am new to GCP. I have bought a domain from GoDaddy and hosted my website on GCP. My website is built on WordPress. I have contact forms on WordPress and when customer visit my website and leave a ...
google-cloud-platform
2
votes
1
answer
1k
views
Correct SPF record to avoid softfail for emails sent from domain address using Gmail?
I have a domain address, such as [email protected], which forwards to Gmail.
Gmail is configured to 'send email as' [email protected], using example.com's SMTP server.
Emails sent from Gmail as me@example....
- 121
17
votes
2
answers
3k
views
DNS MX/SPF/DMARC records without actuall emails on domain
I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "...
- 273
0
votes
0
answers
1k
views
Allowing Messages from IP Address DMARC
I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The ...
- 605
1
vote
2
answers
1k
views
DNS MX record and SMTP server
I have a SMTP server. DKIM is setup and working and have also setup SPF.
The SMTP host is smtp.domain.com
On the DNS I have a A record with smtp pointing to the IPv4 and a AAAA record with smtp ...
- 2,055
1
vote
1
answer
159
views
Add SPF record for multiple systems in different servers
I have a domain with a published SPF record (v=spf1 a mx ip4:xx.xxx.xxx.25 ~all) for it (e.g: xyz.com) also this domain has four subdomains:
sub1.xyz.com xx.xxx.xxx.29
sub2.xyz.com xx.xxx.xxx.30
...
- 113
1
vote
1
answer
56
views
Combine SPF record with and without rules/mechnisms
I'm very new to DNS world, and now I'm supposed to add an SFP record like v=spf1 mx include:_spf.blah.com ~all to an existing SPF record on a zone.
existing TXT looks like this :
v=spf1 include:_spf....
- 107
2
votes
1
answer
1k
views
SPF DNS void lookup limit exceeded [duplicate]
while testing my DKIM/SPF config by using the port25.com email service, I am getting the following reply for my SPF record:
permerror (DNS void lookup limit exceeded)
However, my spf record does not ...
- 345
2
votes
1
answer
226
views
what is the appropriate DMARC configuration for a domain that should fail hard on DKIM but soft on SPF
Messages sent by my domain will always be DKIM-signed and any that are not should be immediately discarded by recipients. But strict SPF enforcement leads to problems where internal mail-forwarding ...
- 251
0
votes
1
answer
1k
views
Create SPF TXT for Wildcard Domains
Today I use DigitalOcean as hosting my software.
Our platform is a SaaS that sends emails from wildcard domains, example: [email protected]; [email protected];
...
- 289
1
vote
1
answer
439
views
DNS SPF TXT Records - is this legal?
foo.org 1 IN TXT "v=spf1 include:_spf.google.com include:_spf.bar.com ~all"
foo.org 1 IN TXT "v-spf1 ip4:99.99.99.99 include:_spf.google.com ~all"
or do they need to be combined into one ...
- 19
4
votes
1
answer
1k
views
Size of SPF with other TXT records
The SPF specification says:
The published SPF record for a given domain name SHOULD remain
small enough that the results of a query for it will fit within 512
octets. Otherwise, there is a ...
- 6,938
0
votes
1
answer
315
views
What happens when SPF includes domain that does not have SPF but A record instead
A company whose mail servers we occasionally use to send emails has asked us to include their domain in our SPF record as follows: v=spf1 [...] include:app.sgizmo.eu ~all.
Now it turns out that there ...
- 131
-1
votes
1
answer
111
views
Does record domain "include:" also refers to subdomains?
I have a doubt setting up my SPF record. I would like to know if I set up an include record in the SPF record will also be "including" the subdomains of that principal domain that I have included?.
...
- 11
1
vote
2
answers
759
views
MX record delegation
I have a client who manages their own DNS - all the A records and CNAME records for example.com and a number of subdomains.
They want to use a dedicated subdomain for email - em.example.com. They ...
- 143
0
votes
0
answers
87
views
SPF hosted on CENT OS. Does not restarting the "named" service after editing the SPF record break the whole DNS File?
We had to change and Include entry from: Include:Domain-name.com
to: Include:_Domain-name.com
This was the only change we made. After a couple days none of our hosted resources were available.
My ...
1
vote
2
answers
636
views
Email FROM header authentication using subdomain delegation
Our company owns the domain somecompany.com and uses an external email provider emailemailprovider.com to send emails. The email provider recommends to delegate a subdomain for them to automatically ...
- 251
0
votes
1
answer
59
views
How to merge multipe spf1 records to one?
My question is rather specific than the answers I found. I know a merge record could be something like this:
TXT "v=spf1 include:mailgun.org include:_spf.google.com ~all."
But in my case my spf1 ...
1
vote
1
answer
2k
views
SPF record longer than 255 characters in AWS Route53
I saw that there's been a couple questions on here that ask the same thing. However, personally, I don't grasp the hint provided. Yes, I've seen https://kb.isc.org/docs/aa-00356 and it only made ...
- 113
1
vote
1
answer
1k
views
Azure DNS does not lookup SPF policies for certain domains
I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures.
Without going into the security things, today I noticed ...
- 2,359
0
votes
1
answer
781
views
Postfix warning: dns_get_fixed
I have a recently setup Postfix/Dovecot simple mail server (if there is such a thing).
It was stable, and worked without issue for about 2-3 weeks, until I wanted to get SPF setup. Now, it still ...
- 21
1
vote
1
answer
1k
views
SPF errors when sending emails
I setup a mail server on mail.mydomain.com. I am able to receive email. Problem occurs when i try to send an email. I have two servers:
mail.mydomain.com - which is on different ip (e.g. 1.1.1.1)
...
- 125
-1
votes
1
answer
1k
views
SPF record permerror showed in an email header, but no reason for it
Our customers are complaining about the spam issue. There are a number of spam emails which are not tagged as spam emails. These spam emails were sent from forged seneder address, which means our SPF ...
- 163
0
votes
2
answers
79
views
SPF: Multiple Mailserver
I have a domain with this A record:
A 1.2.3.4
And a record for mail like this, I have my mail services at a different hosting provider for exchange.
MX mxpool.example.com
Now I want to set up a ...
- 145
0
votes
1
answer
105
views
Using multiple A-records within one SPF a:name
Let's say my SPF record looks like this:
v=spf1 a:spf.example.com -all
And the records for spf.example.com look like this:
spf.example.com A 12.12.12.12
spf.example.com A 12.42.66.12
spf.example....
- 123
-2
votes
1
answer
1k
views
Setting SPF record for mail relay servers to avoid softfail
I have an issue with correctly setting the SPF record for my own domain.
Initially my DNS settings as set by the domainhoster were as follows:
@ TXT "v=spf1 mx ~all"
@ MX 10 mx101....
- 3