Checking proper SPF record
Kevin Darcy
kcd at chrysler.com
Tue Jul 8 18:22:49 UTC 2014
http://www.kitterman.com/spf/validate.html
- Kevin
On 7/8/2014 12:43 PM, Alex wrote:
> Hi,
>
> I have a mail server that manages mail for about ten domains, using
> bind-9.9.4-12.P2 on fedora20. I'd like to make sure my SPF record in
> my SOA is set up correctly, and hoped someone could help. Currently I
> have the following:
>
> $TTL 1d
>
> @ IN SOA ns.example.com <http://ns.example.com>.
> admin.ns.example.com <http://admin.ns.example.com>. (
> 2011041707 ;serial (yyyymmddxx)
> 3h ;refresh every 3 hours
> 1h ;retry every 1 hr
> 7d ;expire in 7 days
> 1d ) ;minimum ttl 1 day
>
> IN NS ns.example.com <http://ns.example.com>.
> IN NS ns1.example.com <http://ns1.example.com>.
> IN NS ns2.example.com <http://ns2.example.com>.
>
> A 192.168.1.10
>
> IN MX 10 smtp.example.com
> <http://smtp.example.com>.
>
> IN TXT "v=spf1 mx a ip4:192.168.1.11/32
> <http://192.168.1.11/32> ip4:192.168.2.11/32 <http://192.168.2.11/32>
> a:smtp.example.com <http://smtp.example.com> a:smtp1.example.com
> <http://smtp1.example.com> -all"
>
> ns IN TXT "v=spf1 a -all"
> ns1 IN TXT "v=spf1 a -all"
> ns2 IN TXT "v=spf1 a -all"
> smtp IN TXT "v=spf1 a -all"
> smtp1 IN TXT "v=spf1 a -all"
>
> I believe there is a new SPF TXT entry in addition to the one I've
> created above that's now being used? The references I read were unclear.
>
> Does this look correct? I'd have to add this SOA to every domain the
> mail server manages, correct? The smtp and smtp1 servers are the only
> two servers that should be responsible for this domain.
>
> Any ideas greatly appreciated.
> Thanks,
> Alex
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140708/14579f61/attachment-0001.html>
More information about the bind-users
mailing list