Checking proper SPF record

[Kevin Darcy]

http://www.kitterman.com/spf/validate.html

                                     - Kevin

On 7/8/2014 12:43 PM, Alex wrote:
> Hi,
>
> I have a mail server that manages mail for about ten domains, using 
> bind-9.9.4-12.P2 on fedora20. I'd like to make sure my SPF record in 
> my SOA is set up correctly, and hoped someone could help. Currently I 
> have the following:
>
> $TTL 1d
>
> @  IN    SOA ns.example.com <http://ns.example.com>. 
> admin.ns.example.com <http://admin.ns.example.com>. (
>                 2011041707      ;serial (yyyymmddxx)
>                 3h              ;refresh every 3 hours
>                 1h              ;retry every 1 hr
>                 7d              ;expire in 7 days
>                 1d )            ;minimum ttl 1 day
>
>                 IN      NS ns.example.com <http://ns.example.com>.
>                 IN      NS ns1.example.com <http://ns1.example.com>.
>                 IN      NS ns2.example.com <http://ns2.example.com>.
>
>                         A       192.168.1.10
>
>                 IN      MX      10 smtp.example.com 
> <http://smtp.example.com>.
>
>                 IN TXT "v=spf1 mx a ip4:192.168.1.11/32 
> <http://192.168.1.11/32> ip4:192.168.2.11/32 <http://192.168.2.11/32> 
> a:smtp.example.com <http://smtp.example.com> a:smtp1.example.com 
> <http://smtp1.example.com> -all"
>
> ns              IN      TXT     "v=spf1 a -all"
> ns1             IN      TXT     "v=spf1 a -all"
> ns2             IN      TXT     "v=spf1 a -all"
> smtp            IN      TXT     "v=spf1 a -all"
> smtp1           IN      TXT     "v=spf1 a -all"
>
> I believe there is a new SPF TXT entry in addition to the one I've 
> created above that's now being used? The references I read were unclear.
>
> Does this look correct? I'd have to add this SOA to every domain the 
> mail server manages, correct? The smtp and smtp1 servers are the only 
> two servers that should be responsible for this domain.
>
> Any ideas greatly appreciated.
> Thanks,
> Alex
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140708/14579f61/attachment-0001.html>