Ryfujk

Is the destination of a commercial flight important for the pilot?

How to combine multiple text files of different lengths and multiple columns by a column

What is the oldest known work of fiction?

At which point does a character regain all their Hit Dice?

What will be the benefits of Brexit?

Curses work by shouting - How to avoid collateral damage?

apt-get update is failing in debian

Opposite of a diet

Displaying the order of the columns of a table

Valid Badminton Score?

Can somebody explain Brexit in a few child-proof sentences?

The plural of 'stomach"

Greatest common substring

Can I use my Chinese passport to enter China after I acquired another citizenship?

Your magic is very sketchy

How will losing mobility of one hand affect my career as a programmer?

What defines a dissertation?

Increase performance creating Mandelbrot set in python

Why Were Madagascar and New Zealand Discovered So Late?

Why is delta-v is the most useful quantity for planning space travel?

How can I get through very long and very dry, but also very useful technical documents when learning a new tool?

How does residential electricity work?

Coordinate position not precise

What's the purpose of "true" in bash "if sudo true; then"

SPF setup for mail and relay server

Correct SPF Record Usage?Emails are going to spamPermerror when testing multiple SPF records for Google Apps and MailChimpEmail sent from server with rDNS & SPF being blocked by HotmailSPF configuration questionIn which DNS zone files i have to put spf record entry to get “spf=pass”?DKIM header exists but signature is not validDMARC report: SPF fails with mx-domain as spf-domain in auth_resultSetting SPF record for mail relay servers to avoid softfailCombine 2 spf records into 1

0

So I am quite new to mail servers and looking for help with setting up SPF properly for this environment:

• mailserver (IP 11.11.11.11, example.com, random.com, test.com)




• relay server (IP 22.22.22.22, srv2.example.com)

I have multiple domains hosted on my mailserver (example.com) that all use the relay server (srv2.example.com) to communicate. I have following entries set in my DNS zone file for example.com:

• @ IN MX 10 srv2


• @ IN TXT "v=spf1 +mx +a a:22.22.22.22
  a:ip6:2001:0db8:85a3:0000:0000:8a2e:0370:7334
  include:srv2.example.com -all"

This would be the Zone File for another domain hosted on my mailserver (example.com):

• @ IN TXT "v=spf1 +mx +a a:ip4:22.22.22.22
  a:ip6:2001:0db8:85a3:0000:0000:8a2e:0370:7334 -all"

Doing a test and sending myself a mail to googlemail results with this response:

spf=pass (google.com: domain of admin@example.com designates
22.22.22.22 as permitted sender) smtp.mailfrom=admin@example.com;

But my settings somehow still can't be correct as when I test the mail somewhere else I get following result:

SPF check details: Result: neutral ID(s) verified:
smtp.mail=admin@example.com DNS record(s):

Sender-ID check details: Result: neutral ID(s) verified:
smtp.mail=admin@example.com DNS record(s):

My first question I ask myself: Why can the response be neutral if I set either ~all or -all? If I dig deeper and use this website http://spf.myisp.ch to check my SPF entry I get this:

The hosts , have no SPF entries defined although they are referenced. This violates RFC4408.

What comes now in my head is that "," probably is referencing to srv2.example.com and that means that my relay server itself has no SPF entry.

There is many question in my head about SPF and relaying, sadly http://www.openspf.org which seems to be a great place to get more information seems to be offline for some time now.

postfix dovecot spf dns-zone

share

asked 2 mins ago

WoozaWooza

1

New contributor

Wooza is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

So I am quite new to mail servers and looking for help with setting up SPF properly for this environment:

• mailserver (IP 11.11.11.11, example.com, random.com, test.com)




• relay server (IP 22.22.22.22, srv2.example.com)

I have multiple domains hosted on my mailserver (example.com) that all use the relay server (srv2.example.com) to communicate. I have following entries set in my DNS zone file for example.com:

• @ IN MX 10 srv2


• @ IN TXT "v=spf1 +mx +a a:22.22.22.22
  a:ip6:2001:0db8:85a3:0000:0000:8a2e:0370:7334
  include:srv2.example.com -all"

This would be the Zone File for another domain hosted on my mailserver (example.com):

• @ IN TXT "v=spf1 +mx +a a:ip4:22.22.22.22
  a:ip6:2001:0db8:85a3:0000:0000:8a2e:0370:7334 -all"

Doing a test and sending myself a mail to googlemail results with this response:

spf=pass (google.com: domain of admin@example.com designates
22.22.22.22 as permitted sender) smtp.mailfrom=admin@example.com;

But my settings somehow still can't be correct as when I test the mail somewhere else I get following result:

SPF check details: Result: neutral ID(s) verified:
smtp.mail=admin@example.com DNS record(s):

Sender-ID check details: Result: neutral ID(s) verified:
smtp.mail=admin@example.com DNS record(s):

My first question I ask myself: Why can the response be neutral if I set either ~all or -all? If I dig deeper and use this website http://spf.myisp.ch to check my SPF entry I get this:

The hosts , have no SPF entries defined although they are referenced. This violates RFC4408.

What comes now in my head is that "," probably is referencing to srv2.example.com and that means that my relay server itself has no SPF entry.

There is many question in my head about SPF and relaying, sadly http://www.openspf.org which seems to be a great place to get more information seems to be offline for some time now.

postfix dovecot spf dns-zone

share

asked 2 mins ago

WoozaWooza

1

New contributor

Wooza is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

So I am quite new to mail servers and looking for help with setting up SPF properly for this environment:

• mailserver (IP 11.11.11.11, example.com, random.com, test.com)




• relay server (IP 22.22.22.22, srv2.example.com)

I have multiple domains hosted on my mailserver (example.com) that all use the relay server (srv2.example.com) to communicate. I have following entries set in my DNS zone file for example.com:

• @ IN MX 10 srv2


• @ IN TXT "v=spf1 +mx +a a:22.22.22.22
  a:ip6:2001:0db8:85a3:0000:0000:8a2e:0370:7334
  include:srv2.example.com -all"

This would be the Zone File for another domain hosted on my mailserver (example.com):

• @ IN TXT "v=spf1 +mx +a a:ip4:22.22.22.22
  a:ip6:2001:0db8:85a3:0000:0000:8a2e:0370:7334 -all"

Doing a test and sending myself a mail to googlemail results with this response:

spf=pass (google.com: domain of admin@example.com designates
22.22.22.22 as permitted sender) smtp.mailfrom=admin@example.com;

But my settings somehow still can't be correct as when I test the mail somewhere else I get following result:

SPF check details: Result: neutral ID(s) verified:
smtp.mail=admin@example.com DNS record(s):

Sender-ID check details: Result: neutral ID(s) verified:
smtp.mail=admin@example.com DNS record(s):

My first question I ask myself: Why can the response be neutral if I set either ~all or -all? If I dig deeper and use this website http://spf.myisp.ch to check my SPF entry I get this:

The hosts , have no SPF entries defined although they are referenced. This violates RFC4408.

What comes now in my head is that "," probably is referencing to srv2.example.com and that means that my relay server itself has no SPF entry.

There is many question in my head about SPF and relaying, sadly http://www.openspf.org which seems to be a great place to get more information seems to be offline for some time now.

postfix dovecot spf dns-zone

share

asked 2 mins ago

WoozaWooza

1

New contributor

Wooza is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share

asked 2 mins ago

WoozaWooza

1

New contributor

Wooza is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share

asked 2 mins ago

WoozaWooza

1

New contributor

Wooza is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 mins ago

WoozaWooza

1

New contributor

Wooza is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 mins ago

WoozaWooza

1