spf-discuss
[Top] [All Lists]

Re: [spf-discuss] Microsoft's spf record format

2006-02-24 14:08:48
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rene Barbier wrote:
You have:

v=spf1 a mx mx:smtp.iris.co.id ip4:202.127.110.145/28 ~all

the mx: in front of smtp.iris.co.id means "find the address associated
with the MX record for smtp.iris.co.id". There is no such record. I
suspect you just meant that mail could be sent via smtp.iris.co.id, in
which case you could use

v=spf1 a mx smtp.iris.co.id ip4:202.127.110.145/28 ~all

You mean: v=spf1 a mx a:smtp.iris.co.id ip4:202.127.110.145/28 ~all
(note the "a:" in front of smtp.iris.co.id")

To go a bit further, the MX for iris.co.id already contains
smtp.iris.co.id, so you don't need to add smtp.iris.co.id , and
ip4:202.127.110.145/28 also contains all the other hosts you mention.

So you could reduce it to

v=spf1 ip4:202.127.110.145/28 ~all
or
v=spf1 ip4:202.127.110.144/28 ~all

Probably a good idea.

Jeff Macdonald wrote:
Please realize that MS only does PRA checking, even though the SenderID
spec allows for MFROM checking. I'd suggest 2 records in DNS, one for
SenderID, one for SPF. I'd recommend this even if the MFROM and header
from (RFC822) are the same.

SPF:
spf=v1 {remaining record}

No, it's: v=spf1 {remaining record}

SenderID
spf2.0/pra {remaining record}

This one's correct, though.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFD/3XFwL7PKlBZWjsRAjayAJsFmApNqcg37EnoG9iHpfiGO/zwjgCeL4Oo
aAW47Cp3ojXtqRrAuh/KpeQ=
=MtW9
-----END PGP SIGNATURE-----

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

<Prev in Thread] Current Thread [Next in Thread>