On 2022-08-27 at 17:09 -0500, Darrell Budic wrote: > Anyone else seeing this? Customer of mine just got some bounces from > gmail for invalid SPF/DKIM. He doesn’t have either, so I’m not sure > what this is about? > > Mind you, I did send him to setup a valid SPF entry, and > authentication is good, but this seems like a misleading error > message...
When querying the SPF record, I only get it about 50% of times: ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 637 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1460 ;; QUESTION SECTION: ;musichael.com. IN TXT ;; ANSWER SECTION: musichael.com. 3600 IN TXT "v=spf1 ip4:204.130.133.0/26 -all" vs ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3637 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;musichael.com. IN TXT ;; AUTHORITY SECTION: musichael.com. 600 IN SOA ns1.yourhostingaccount.com. admin.yourhostingaccount.com. 2012080973 10800 3600 604800 3600 I'm not sure what's going on, since I get the record both from ns1.mydomain.com and ns2.mydomain.com when pointing directly to them, It could be some dns caching somewhere. But there are definitely some shenanigans going on with your SPF record, it's not Google. Regards _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
