SPF Record Madness
From: Ken (SHIELDSIT)18 Dec 2012 22:23
To: ALL1 of 25
Is there anyone on here that I can pay $US Currency$ to help me figure out what the fuck is going on with my SPF record? I have one mail server that seems to work with its record, and one, on a different ISP that just doesn't. I have no clue why because they are set up the same!
Bueller Bueller? Anyone?
0/0
From: 99% of gargoyles look like (MR_BASTARD)19 Dec 2012 11:16
To: Ken (SHIELDSIT)
2 of 25
I accept all currencies, even $US.
0/0
From: Ken (SHIELDSIT)19 Dec 2012 14:14
To: 99% of gargoyles look like (MR_BASTARD)
3 of 25
Does that mean you are an SPF expert and accept the mission?
0/0
From: 99% of gargoyles look like (MR_BASTARD)19 Dec 2012 14:40
To: Ken (SHIELDSIT)
4 of 25
No, but I'm happy to accept the money.
I misread your OP and thought you meant that by sending me money that would help you figure out what's wrong with your SPF record, I didn't realise that you wanted me to figure out what's wrong. I have no idea what an SPF is.
I misread your OP and thought you meant that by sending me money that would help you figure out what's wrong with your SPF record, I didn't realise that you wanted me to figure out what's wrong. I have no idea what an SPF is.
0/0
From: Dan (HERMAND)19 Dec 2012 14:50
To: Ken (SHIELDSIT)
5 of 25
Can you post your SPF / DNS records? (Change names / IP's accordingly)
0/0
From: Ken (SHIELDSIT)20 Dec 2012 15:33
To: Dan (HERMAND)
6 of 25
Here is our ISP DNS records. I can get you internal DNS if you think you need to see it.
Here is the SPF record. I used the MS tool to make it because I don't know anything about these fucking things!
Here is the SPF record. I used the MS tool to make it because I don't know anything about these fucking things!
code:
"v=spf1 mx ptr ip4:166.102.88.101 mx:matsoninsurance.com -all"
0/0
From: Dan (HERMAND)20 Dec 2012 19:16
To: Ken (SHIELDSIT)
7 of 25
So that only points to one server, doesn't it? Don't you need to validate the IP of your second one?
0/0
From: Ken (SHIELDSIT)20 Dec 2012 19:23
To: Dan (HERMAND)
8 of 25
Well I dunno. I don't use a smart host for sending I just use DNS and mail comes straight to this server so do I?
0/0
From: Dan (HERMAND)20 Dec 2012 19:26
To: Ken (SHIELDSIT)
9 of 25
Essentially, whatever IP addresses / mail servers can send e-mail for that domain need to be in the SPF record.
Edit: Is this the wizard you used?
http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/default.aspx
(Putting your domain into that ^^ says you have no SPF records..? Although it also says Microsoft.com doesn't have one, so not sure if that's accurate)
Edit: Is this the wizard you used?
http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/default.aspx
(Putting your domain into that ^^ says you have no SPF records..? Although it also says Microsoft.com doesn't have one, so not sure if that's accurate)
EDITED: 20 Dec 2012 19:32 by HERMAND
0/0
From: Dan (HERMAND)20 Dec 2012 19:34
To: Dan (HERMAND)
10 of 25
http://www.kitterman.com/spf/validate.html
This one works better cos it returns TXT results - I think the Microsoft.com is a bit broke. Either way, it's showing yours as still having no record which is odd.
By the way, it may be just the way your DNS stuff shows but the SPF record shouldn't be in quotes. That may not help.
This one works better cos it returns TXT results - I think the Microsoft.com is a bit broke. Either way, it's showing yours as still having no record which is odd.
By the way, it may be just the way your DNS stuff shows but the SPF record shouldn't be in quotes. That may not help.
EDITED: 20 Dec 2012 19:36 by HERMAND
0/0
From: Ken (SHIELDSIT)20 Dec 2012 19:37
To: Dan (HERMAND)
11 of 25
That's the one I use and it also says I have none. Which, you can clearly see I do. So I don't know what the fuck is going on!
I only have one mail server on this network.
My other network seems to be working fine (different host and DNS provider). The SPF record shows up and validates fine.
I called the ISP and they tell me they can't do anything about it. They are douche faces.
So anyway, thoughts, idears?
I only have one mail server on this network.
My other network seems to be working fine (different host and DNS provider). The SPF record shows up and validates fine.
I called the ISP and they tell me they can't do anything about it. They are douche faces.
So anyway, thoughts, idears?
0/0
From: Dan (HERMAND)20 Dec 2012 19:44
To: Ken (SHIELDSIT)
12 of 25
Yeah, I think the issue is DNS not your spf text. Try deleting the record and creating it again without quotes.
0/0
From: Dan (HERMAND)20 Dec 2012 19:47
To: Ken (SHIELDSIT)
13 of 25
I can't see the full name column, but it should be blank if possible or just domain.com. (note the last dot) if not
0/0
From: Ken (SHIELDSIT)20 Dec 2012 21:15
To: Dan (HERMAND)
14 of 25
It requires me to include the quotes! It's a fracking mess man! But I can make sure to include that last . because I'm sure it's not there. And there is already a blank catchall and it complains if I add another.
EDITED: 20 Dec 2012 21:16 by SHIELDSIT
0/0
From: Ken (SHIELDSIT)20 Dec 2012 21:17
To: Dan (HERMAND)
15 of 25
DNS as in my ISP not allowing me to correctly set it up or an error on my part?
0/0
From: Dan (HERMAND)20 Dec 2012 22:35
To: Ken (SHIELDSIT)
16 of 25
So, that all sounds pretty fucked up. My DNS control panel for my domain doesn't like blanks, but that goes for all entries. Remember, a blank record isn't a 'catch all', it just means it's a record for the root domain of the zone itself.
So if for example.com you have
[blank] [a] 192.168.1.1
www [a] 192.168.1.2
That means example.com resolves to 192.168.1.1 and www.exmaple.com resolves to192.168.1.2. In my case, as I can't have blanks I have to specify the fully qualified name:
example.com. [a] 192.168.1.1
www.example.com. [a] 192.168.1.2
Which does exactly the same thing
In fact, actually, as I was typing this I suddenly realised what was happening. You've actually set up a DNS entry for the following:
matsoninsurance.com.matsoninsurance.com
You can actually type that into the Microsoft checker and it works. So that entry needs to be blank.
So if for example.com you have
[blank] [a] 192.168.1.1
www [a] 192.168.1.2
That means example.com resolves to 192.168.1.1 and www.exmaple.com resolves to192.168.1.2. In my case, as I can't have blanks I have to specify the fully qualified name:
example.com. [a] 192.168.1.1
www.example.com. [a] 192.168.1.2
Which does exactly the same thing
In fact, actually, as I was typing this I suddenly realised what was happening. You've actually set up a DNS entry for the following:
matsoninsurance.com.matsoninsurance.com
You can actually type that into the Microsoft checker and it works. So that entry needs to be blank.
EDITED: 20 Dec 2012 22:39 by HERMAND
0/0
From: Ken (SHIELDSIT)20 Dec 2012 22:45
To: Dan (HERMAND)
17 of 25
GTFO, HA! It's funny how things get solved! Let me change that up. How much cold hard American cash is this going to cost me? (angel)
0/0
From: Dan (HERMAND)20 Dec 2012 22:46
To: Ken (SHIELDSIT)
18 of 25
Try naming it @ if it still don't work. If not, shout at your ISP and make them do it. And you can get me a beer when you come over :)
0/0
From: Ken (SHIELDSIT)20 Dec 2012 22:47
To: Dan (HERMAND)
19 of 25
I'll try @ because, look. They are douches!
Attachments:
0/0