All Questions
Tagged with spf domain-name-system
253
questions
0
votes
2
answers
55
views
How to put a No-ip dns in SPF
I want to whitelist my No-Ip DNS on my SPF record because sometimes it gets targeted as spam because is not listed in permitted senders.
Reading the No-Ip FAQ, it says that I have only to put include:...
0
votes
1
answer
101
views
SPF record is set, but mail testers are giving me high severity risk
I'm using sendmail and I have the following SPF record:
"v=spf1 a mx a:hostinger.com ip4:ip_here -all"
And it gives me this description:
domain.com. 14400 IN TXT v=spf1 a mx a:hostinger.com ...
- 123
0
votes
0
answers
72
views
DMARC, SPF and DNS wildcards
My domain configuration has one domain and three subdomains, one of which is identical to the mail server's hostname:
example.com
sales.example.com
internal.example.com
mail.example.com
I initially ...
- 267
0
votes
1
answer
198
views
Combining 2 SPF records with 2 different host names
I have 2 spf records I need to combine.
1st spf record is:
Host: front-mail Value: v=spf1 include:sendgrid.net ~all
2nd spf record is:
Host: @ Value: v = spf1 include:zoho.jp ~all
I've tried to ...
0
votes
1
answer
267
views
SPF records pass in Gmail sends but show failure in Postmaster
I'm using Sparkpost as the ESP to warm up a secondary domain. We've used this Sparkpost IP for our primary domain for a few months without a problem. I've been tracking the deliverability of the ...
3
votes
1
answer
1k
views
SPF record in DNS sending via Gmail
I have an old domain that I want to re-purposes for a new website which will send emails. I'm using Asp.Net Core, if that makes a difference (I do not think it does). I've written several apps that ...
- 131
0
votes
0
answers
82
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS ...
0
votes
1
answer
1k
views
Gmail adds multiple SPF records
When I connected my domain to gmail, it added two records to my DNS:
TXT
@
v=spf1 include:dc-aa8e722993._spfm.mydomainhere.com ~all
TXT
dc-aa8e722993._spfm
v=spf1 include:_spf.google.com ~all
But ...
- 103
0
votes
1
answer
167
views
Mail server running on a subdomain - how could email acceptance by other servers be influenced by dns records for different ips?
I started to run a self-hosted mail server which I want to be reachable via a subdomain only. I have an A record for mail.sub.domain.tld and an MX record for sub.domain.tld /edit: which points to mail....
- 23
0
votes
2
answers
356
views
Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails
I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is ...
- 165
5
votes
2
answers
1k
views
Does adding another TXT record affect SPF authentication?
I am using multiple mail services for my domain sliver.proteuslake.asia, such as Mailjet, Google, and Atlassian. I have already added three TXT records for my domain:
"v=spf1 include:spf.mailjet....
- 153
0
votes
1
answer
439
views
Confused About Why SPF Needs My Email Apps Domain
FYI:
we have a custom domain and we pay for Google Workspace to use that domain for our email/gmail.
i have SPF, DKIM, & DMARC all setup, and a Google tek support person verified it was correct ...
- 111
0
votes
2
answers
415
views
Root domain in SPF record instead of full hostname
Can i use root domain like google.com instead of _spf.google.com in SPF record?.
My SPF record
v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com include:mxsmtp.sendpulse.com +a +mx ~all
...
2
votes
1
answer
741
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 63
0
votes
1
answer
56
views
Are SPF records checked depth first or breadth first (or something else)
We have a domain which has 11 includes; so is failing SPF validation as it's gone over the limit.
Most of the lookups are for third party resources, so flattenning the SPF record isn't ideal; we'd ...
- 1,344
7
votes
3
answers
2k
views
Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail
Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail.
When I "View Original Message" in GMail, I see...
SPF: NEUTRAL with ...
- 181
0
votes
1
answer
865
views
Publishing Exchange Server public IP address in a hybrid Exchange setup?
I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup.
I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
- 1,305
7
votes
2
answers
1k
views
How can I create and update the existing SPF record to allow more than 10 entries?
How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record?
I wanted to add these two:
include:mailgun.org
include:sendgrid.net
This is my ...
- 1,305
0
votes
1
answer
1k
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
1
vote
1
answer
5k
views
Email DNS Setup: How do I make HELO publish an SPF record? SPF_HELO_NONE - SPF: HELO does not publish an SPF Record
My environment: hMailServer 5.6.8 on Windows Server 2022 Standard
Let's say I have two domains (I don't really own these domains, they're just examples), www.myblog.com and www.mailserver.com. They ...
- 133
-1
votes
1
answer
979
views
Setup bind9 dns for setup DKIM and SPF records [closed]
Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
3
votes
3
answers
698
views
How to set up DNS settings with a domain in the middle for DKIM and SPF?
I am working on a tool that helps the users send emails. I plan on using an MTA (Mail Transfer Agent) in the back end like AWS-SES or Sendgrid etc. In order for the emails to arrive successfully in ...
- 135
0
votes
2
answers
1k
views
send email from another server than FROM domain without being marked as spam
I want to send a mail from a website. The mail server from this domain is not publicly reachable, so I can't use that to send the mail.
The webserver that hosts the website has another email server ...
- 101
0
votes
0
answers
2k
views
How to combine multiple SPF domains, one with an mx mechanism?
I combined 3 SPF records using the standard protocol, but got a null error after combining them.
Individual records:
v=spf1 include:spf.sendinblue.com mx ~all
v=spf1 include:dc-aa8e722993._spfm....
0
votes
1
answer
598
views
How do I add individual mail-sending websites to my SPF record?
My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS:
v=spf1 include:_spf.google.com include:_spf.salesforce.com
include:...
- 1
2
votes
1
answer
166
views
What's the endpoint running at `include:spf.example.com` as seen in an SPF record in DNS?
How can I run an SPF include endpoint for my organisation?
In this example, the SPF record for a domain permits hosts included via the spf.example.com list, and prohibits everything else:
"v=spf1 ...
- 123
1
vote
2
answers
843
views
How to create SPF records for my subdomains pointing to services hosted on Azure
I have a webapp running on Azure and use Google Domains for the domain name (mywebapp.com) and DNS. Azure automatically generates URLs for different resources/services (e.g: https://black-cat-12345....
- 113
5
votes
1
answer
6k
views
why is this DMARC failing verification?
I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3).
* Your DKIM signature is valid
* Your message failed the DMARC verification
A DMARC policy ...
- 153
0
votes
1
answer
306
views
Google SPF fails with some IPs
GMail MX are
ASPMX.L.GOOGLE.COM: 1
ALT1.ASPMX.L.GOOGLE.COM: 5
ALT2.ASPMX.L.GOOGLE.COM: 5
ASPMX3.GOOGLEMAIL.COM: 10
ASPMX2.GOOGLEMAIL.COM: 10
When checking for IPs for these names, each time your ask ...
- 113
2
votes
1
answer
2k
views
Correct SPF record to avoid softfail for emails sent from domain address using Gmail?
I have a domain address, such as [email protected], which forwards to Gmail.
Gmail is configured to 'send email as' [email protected], using example.com's SMTP server.
Emails sent from Gmail as me@example....
- 121
17
votes
2
answers
3k
views
DNS MX/SPF/DMARC records without actuall emails on domain
I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "...
- 273
0
votes
0
answers
2k
views
Allowing Messages from IP Address DMARC
I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The ...
- 615
1
vote
2
answers
2k
views
DNS MX record and SMTP server
I have a SMTP server. DKIM is setup and working and have also setup SPF.
The SMTP host is smtp.domain.com
On the DNS I have a A record with smtp pointing to the IPv4 and a AAAA record with smtp ...
- 2,055
1
vote
1
answer
176
views
Add SPF record for multiple systems in different servers
I have a domain with a published SPF record (v=spf1 a mx ip4:xx.xxx.xxx.25 ~all) for it (e.g: xyz.com) also this domain has four subdomains:
sub1.xyz.com xx.xxx.xxx.29
sub2.xyz.com xx.xxx.xxx.30
...
- 113
1
vote
1
answer
65
views
Combine SPF record with and without rules/mechnisms
I'm very new to DNS world, and now I'm supposed to add an SFP record like v=spf1 mx include:_spf.blah.com ~all to an existing SPF record on a zone.
existing TXT looks like this :
v=spf1 include:_spf....
- 107
2
votes
1
answer
1k
views
SPF DNS void lookup limit exceeded [duplicate]
while testing my DKIM/SPF config by using the port25.com email service, I am getting the following reply for my SPF record:
permerror (DNS void lookup limit exceeded)
However, my spf record does not ...
- 365
2
votes
1
answer
258
views
what is the appropriate DMARC configuration for a domain that should fail hard on DKIM but soft on SPF
Messages sent by my domain will always be DKIM-signed and any that are not should be immediately discarded by recipients. But strict SPF enforcement leads to problems where internal mail-forwarding ...
- 251
0
votes
1
answer
1k
views
Create SPF TXT for Wildcard Domains
Today I use DigitalOcean as hosting my software.
Our platform is a SaaS that sends emails from wildcard domains, example: [email protected]; [email protected];
...
- 289
1
vote
1
answer
460
views
DNS SPF TXT Records - is this legal?
foo.org 1 IN TXT "v=spf1 include:_spf.google.com include:_spf.bar.com ~all"
foo.org 1 IN TXT "v-spf1 ip4:99.99.99.99 include:_spf.google.com ~all"
or do they need to be combined into one ...
- 19
4
votes
1
answer
1k
views
Size of SPF with other TXT records
The SPF specification says:
The published SPF record for a given domain name SHOULD remain
small enough that the results of a query for it will fit within 512
octets. Otherwise, there is a ...
- 6,968
0
votes
1
answer
431
views
What happens when SPF includes domain that does not have SPF but A record instead
A company whose mail servers we occasionally use to send emails has asked us to include their domain in our SPF record as follows: v=spf1 [...] include:app.sgizmo.eu ~all.
Now it turns out that there ...
- 131
-1
votes
1
answer
127
views
Does record domain "include:" also refers to subdomains?
I have a doubt setting up my SPF record. I would like to know if I set up an include record in the SPF record will also be "including" the subdomains of that principal domain that I have included?.
...
- 11
1
vote
2
answers
854
views
MX record delegation
I have a client who manages their own DNS - all the A records and CNAME records for example.com and a number of subdomains.
They want to use a dedicated subdomain for email - em.example.com. They ...
- 143
0
votes
0
answers
96
views
SPF hosted on CENT OS. Does not restarting the "named" service after editing the SPF record break the whole DNS File?
We had to change and Include entry from: Include:Domain-name.com
to: Include:_Domain-name.com
This was the only change we made. After a couple days none of our hosted resources were available.
My ...
1
vote
2
answers
724
views
Email FROM header authentication using subdomain delegation
Our company owns the domain somecompany.com and uses an external email provider emailemailprovider.com to send emails. The email provider recommends to delegate a subdomain for them to automatically ...
- 261
0
votes
1
answer
66
views
How to merge multipe spf1 records to one?
My question is rather specific than the answers I found. I know a merge record could be something like this:
TXT "v=spf1 include:mailgun.org include:_spf.google.com ~all."
But in my case my spf1 ...
1
vote
1
answer
3k
views
SPF record longer than 255 characters in AWS Route53
I saw that there's been a couple questions on here that ask the same thing. However, personally, I don't grasp the hint provided. Yes, I've seen https://kb.isc.org/docs/aa-00356 and it only made ...
- 113
1
vote
1
answer
1k
views
Azure DNS does not lookup SPF policies for certain domains
I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures.
Without going into the security things, today I noticed ...
- 2,367
0
votes
1
answer
799
views
Postfix warning: dns_get_fixed
I have a recently setup Postfix/Dovecot simple mail server (if there is such a thing).
It was stable, and worked without issue for about 2-3 weeks, until I wanted to get SPF setup. Now, it still ...
- 21
1
vote
1
answer
1k
views
SPF errors when sending emails
I setup a mail server on mail.mydomain.com. I am able to receive email. Problem occurs when i try to send an email. I have two servers:
mail.mydomain.com - which is on different ip (e.g. 1.1.1.1)
...
- 125