spf-discuss
[Top] [All Lists]

Re: Can I require to satisify multiple conditions based on spf record

2004-10-24 15:04:06
In <5024855(_dot_)1098621628(_at_)[192(_dot_)168(_dot_)0(_dot_)2]> Greg Connor 
<gconnor(_at_)nekodojo(_dot_)org> writes:

--wayne <wayne(_at_)midwestcs(_dot_)com> wrote:

Fourth:
        example.com       TXT  "v=spf1 -include:_spf.%{d} +all"
        _spf.example.com  TXT  "v=spf1 -ip4:192.168.0.0/16 -ptr +all"


oops, I posted without reading the rest of the thread.  Wayne's answer
is a bit more elegant than mine.

Yeah, but I think yours, unlike mine, actually works.  Also I forgot
to put the dots (DNS roots) at the end of my domains.

I think this one works:

  example.com.           TXT  ( "v=spf1 "
                                "-include:ip4._spf.%{d} "
                                "-include:ptr._spf.%{d} "
                                "+all" )
  ip4._spf.example.com.  TXT  "v=spf1 -ip4:192.168.0.0/16 +all"
  ptr._spf.example.com.  TXT  "v=spf1 -ptr +all"


                                  A good use of -include:

It is also an example of a highly restrictive SPF record that uses +all.


-wayne