Hi Todd,

You only need to specify the IPs if you send mail for the domain in question 
from those IPs.  It sounds like you were not sending from your MX, but from 
another IP, so you do need to ensure that the IPs that you send from are on 
your SPF record.  Also, to use SPF you do need an SPF record for each 
domain.

Darin.


----- Original Message ----- 
From: "Todd Richards" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, September 20, 2007 2:09 PM
Subject: [IMail Forum] OT: SPF Gurus


Hi Everyone - I know this is a little off topic, but I discovered that some
there might be some issues with our SPF record, as well as those of our
clients, resulting in mail being rejected.  So I'm going back to the drawing
board.

Overview:  Our mail server has one primary domain with the rest all virtual.

Up until now, our main domain (nnepa.com) was using "v=spf1 mx -all" for
it's SPF record.  For all the domains, they were also using the same thing.


One of the clients who had messages failing to a local university started
asking questions of the university admin ("why are my messages to my
daughter never making it?")  He explained that the SPF record on their
domain was wrong, and suggested the following:
     "v=spf1 mx ip4:216.81.209.0/24 -all"

I implemented this for them and they were able to then send email.  The
problem is, by my understanding, is that we do not own that entire block of
IP addresses.  So I was going to refine it a little and use
     "v=spf1 ip4:216.81.209.193/27 ~all"
,which would cover our block.

The question I have is a) does anyone see any harm in doing this, and b)
should this be set up for each of the domains as well?

I was on OpenSPF's website, which is great.  But I'd really appreciate any
thoughts that you might have.

Todd

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to