Hi Everyone - I know this is a little off topic, but I discovered that some
there might be some issues with our SPF record, as well as those of our
clients, resulting in mail being rejected.  So I'm going back to the drawing
board.

Overview:  Our mail server has one primary domain with the rest all virtual.

Up until now, our main domain (nnepa.com) was using "v=spf1 mx -all" for
it's SPF record.  For all the domains, they were also using the same thing.


One of the clients who had messages failing to a local university started
asking questions of the university admin ("why are my messages to my
daughter never making it?")  He explained that the SPF record on their
domain was wrong, and suggested the following:
     "v=spf1 mx ip4:216.81.209.0/24 -all"

I implemented this for them and they were able to then send email.  The
problem is, by my understanding, is that we do not own that entire block of
IP addresses.  So I was going to refine it a little and use 
     "v=spf1 ip4:216.81.209.193/27 ~all"
,which would cover our block.

The question I have is a) does anyone see any harm in doing this, and b)
should this be set up for each of the domains as well?  

I was on OpenSPF's website, which is great.  But I'd really appreciate any
thoughts that you might have.

Todd

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to