In <5024855(_dot_)1098621628(_at_)[192(_dot_)168(_dot_)0(_dot_)2]> Greg Connor
<gconnor(_at_)nekodojo(_dot_)org> writes:
--wayne <wayne(_at_)midwestcs(_dot_)com> wrote:
Fourth:
example.com TXT "v=spf1 -include:_spf.%{d} +all"
_spf.example.com TXT "v=spf1 -ip4:192.168.0.0/16 -ptr +all"
oops, I posted without reading the rest of the thread. Wayne's answer
is a bit more elegant than mine.
Yeah, but I think yours, unlike mine, actually works. Also I forgot
to put the dots (DNS roots) at the end of my domains.
I think this one works:
example.com. TXT ( "v=spf1 "
"-include:ip4._spf.%{d} "
"-include:ptr._spf.%{d} "
"+all" )
ip4._spf.example.com. TXT "v=spf1 -ip4:192.168.0.0/16 +all"
ptr._spf.example.com. TXT "v=spf1 -ptr +all"
A good use of -include:
It is also an example of a highly restrictive SPF record that uses +all.
-wayne