spf at metro
Oct 19, 2004, 6:38 AM
Post #10 of 24
(6876 views)
Permalink
|
Hi,
Seems that you can publish "v=spf1 a:mail.midwaynet.net -all" or (if you
have mail.midwaynet.net as an MX on all of the domains) "v=spf1 mx
-all".
You might want to consider publishing 'v=spf1 -all' on (sub-)domains you
never use to mail from, if you have any A records defined for them. For
example, if you explicitly have defined www.midwaynet.net in your dns,
and you never ever send mail using that domain, put 'v=spf1 -all' on
that domain. Remember, if a mail comes in to a spf checking server, the
server will look up the domain in the envelope from. If you don't
protect your subdomains, spammers may still use them..
Note that non-existing domains don't need spf protection, since it is
very common to reject mail from domains that don't exist anyway.
Koen
On Tue, Oct 19, 2004 at 08:29:02AM -0500, Steve J. Drenner wrote:
> Okay this more info as to what I have going. My mail server is the
> 12.159.225.6 which is mail.midwaynet.net my midwaynet.net email address go
> out as user [at] midwaynet, I also have a bunch of virtual domains behind
> mail.midwaynet.net example user [at] ajtsc, user [at] calvaryassembly and so
> on. And all of this domain also use mail.midwaynet.net as there incoming and
> outgoing smtp. I am starting to see what needs to be done, however more help
> would be great.
>
> Thanks
> Steve
>
> -----Original Message-----
> From: owner-spf-help [at] v2
> [mailto:owner-spf-help [at] v2]On Behalf Of DJ
> Sent: Wednesday, October 13, 2004 3:34 PM
> To: spf-help [at] v2
> Subject: RE: [spf-help] Help
>
>
> Steve,
>
> I'm not sure if you already got the help you needed on this but had some
> information to add for others that may be following the thread.
>
> It's not clear if you send out mail as user [at] mail or
> user [at] midawaynet for the From addresses. This makes a difference.
> Most people are doing masquerading and email show as coming from the
> domain itself and not the specific server within the domain.
>
> This means that you want your TXT record to be for the actual domain name
> and not for mail.midwaynet.net as it would be in the snippet below. The
> TXT entry as it appears would be if your email messages are sent from
> users [at] mail
>
> Now since mail.midwaynet.net is your MX for the domain, what I believe you
> really want to do is move the TXT record up to just above the "www IN A
> ..." record and replace the 'a' within your SPF to 'mx'.
>
> The obscure thing that gets you here is that many people don't realize
> that when they place a record in the file it will apply to "the last host
> name specified". For the first several lines (like your NS records) this
> is the host '@' which gets translated to the actual domain name using this
> table (i.e. midwaynet.net). Now the TXT record where you have placed it
> will apply to the 'mail' entry. Since this entry does not have a trailing
> '.' it will have the domain appended to it so you end up with
> 'mail.midwaynet.net' that the TXT entry applies. I don't think that's
> what you intended.
>
> If that doesn't make sense than please let me know and I will try to
> explain better.
>
> Hope that helps,
> -dj
>
>
> On Wed, 13 Oct 2004, Steve J. Drenner wrote:
>
> ~ 12.159.225.6 is the email server.
> ~
> ~ I also changed the l to a 1
> ~
> ~ -----Original Message-----
> ~ From: owner-spf-help [at] v2
> ~ [mailto:owner-spf-help [at] v2]On Behalf Of Ward, Stuart
> ~ Sent: Wednesday, October 13, 2004 10:38 AM
> ~ To: 'spf-help [at] v2'
> ~ Subject: RE: [spf-help] Help
> ~
> ~
> ~ Do you also send outbound through the server at 12.159.225.6?
> ~
> ~ Shouldn't "IN A 12.159.225.9" be "midwaynet.net IN A 12.159.225.9"
> ~
> ~ -----Original Message-----
> ~ From: Steve J. Drenner [mailto:sdrenner [at] midwaynet]
> ~ Sent: Wednesday, October 13, 2004 11:29 AM
> ~ To: spf-help [at] v2
> ~ Subject: RE: [spf-help] Help
> ~
> ~
> ~ Yes, and here is a copy of one of the zones;
> ~
> ~ @ IN SOA midwaynet3.midwaynet.net.
> ~ hostmaster.midwaynet.net. (
> ~ 2004101201 ; serial
> ~ 10800 ; refresh after 3 hours
> ~ 3600 ; retry after 1 hour
> ~ 604800 ; expire after 1 week
> ~ 86400 ; ttl of 1 day
> ~ )
> ~
> ~ NS ns1.midwaynet.net.
> ~ NS ns2.midwaynet.net.
> ~ IN MX 10 mail.midwaynet.net.
> ~ IN A 12.159.225.9
> ~
> ~ www IN A 12.159.225.9
> ~ ftp IN A 12.159.225.9
> ~ mail IN A 12.159.225.6
> ~ IN TXT "v=spfl a include:midwaynet.net -all"
> ~
> ~ -----Original Message-----
> ~ From: owner-spf-help [at] v2
> ~ [mailto:owner-spf-help [at] v2]On Behalf Of Ward, Stuart
> ~ Sent: Wednesday, October 13, 2004 10:18 AM
> ~ To: 'spf-help [at] v2'
> ~ Subject: RE: [spf-help] Help
> ~
> ~
> ~ Do you have an A record for your domain?
> ~
> ~ -----Original Message-----
> ~ From: Steve J. Drenner [mailto:sdrenner [at] midwaynet]
> ~ Sent: Wednesday, October 13, 2004 11:16 AM
> ~ To: spf-help [at] v2
> ~ Subject: [spf-help] Help
> ~
> ~
> ~ I am trying to put in the spf txt line in my DNS Server. I guess I am not
> ~ sure in what file and where in the file this should go.
> ~ I added the line to my db.domainname and then went to www.dnsreport.com
> and
> ~ it says that the spf file is there but when I go to
> ~ http://www.dnsstuff.com/pages/spf.htm
> ~ it says fail.
> ~
> ~ I am running bind on my Linux servers for dns.
> ~
> ~ in my db.domainname I put (IN TXT v=spfl a include:midwaynet.net -all)
> ~
> ~ Thanks for any help
> ~ Steve
> ~
> ~
> ~ -------
> ~ Archives at http://archives.listbox.com/spf-help/current/
> ~ Donate! http://spf.pobox.com/donations.html
> ~ To unsubscribe, change your address, or temporarily deactivate your
> ~ subscription,
> ~ please go to
> http://v2.listbox.com/member/?listname=spf-help [at] v2
> ~
> ~
> ~ Confidentiality Notice: The information contained in this e-mail and any
> ~ attachments may be legally privileged and confidential. If you are not an
> ~ intended recipient, you are hereby notified that any dissemination,
> ~ distribution or copying of this e-mail is strictly prohibited. If you
> have
> ~ received this e-mail in error, please notify the sender and permanently
> ~ delete the e-mail and any attachments immediately. You should not retain,
> ~ copy or use this e-mail or any attachment for any purpose, nor disclose
> all
> ~ or any part of the contents to any other person.
> ~
> ~ -------
> ~ Archives at http://archives.listbox.com/spf-help/current/
> ~ Donate! http://spf.pobox.com/donations.html
> ~ To unsubscribe, change your address, or temporarily deactivate your
> ~ subscription,
> ~ please go to
> http://v2.listbox.com/member/?listname=spf-help [at] v2
> ~
> ~ -------
> ~ Archives at http://archives.listbox.com/spf-help/current/
> ~ Donate! http://spf.pobox.com/donations.html
> ~ To unsubscribe, change your address, or temporarily deactivate your
> ~ subscription,
> ~ please go to
> http://v2.listbox.com/member/?listname=spf-help [at] v2
> ~
> ~
> ~ Confidentiality Notice: The information contained in this e-mail and any
> ~ attachments may be legally privileged and confidential. If you are not an
> ~ intended recipient, you are hereby notified that any dissemination,
> ~ distribution or copying of this e-mail is strictly prohibited. If you
> have
> ~ received this e-mail in error, please notify the sender and permanently
> ~ delete the e-mail and any attachments immediately. You should not retain,
> ~ copy or use this e-mail or any attachment for any purpose, nor disclose
> all
> ~ or any part of the contents to any other person.
> ~
> ~ -------
> ~ Archives at http://archives.listbox.com/spf-help/current/
> ~ Donate! http://spf.pobox.com/donations.html
> ~ To unsubscribe, change your address, or temporarily deactivate your
> ~ subscription,
> ~ please go to
> http://v2.listbox.com/member/?listname=spf-help [at] v2
> ~
> ~ -------
> ~ Archives at http://archives.listbox.com/spf-help/current/
> ~ Donate! http://spf.pobox.com/donations.html
> ~ To unsubscribe, change your address, or temporarily deactivate your
> subscription,
> ~ please go to
> http://v2.listbox.com/member/?listname=spf-help [at] v2
> ~
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your
> subscription,
> please go to http://v2.listbox.com/member/?listname=spf-help [at] v2
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your
> subscription,
> please go to http://v2.listbox.com/member/?listname=spf-help [at] v2
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your subscription,
> please go to http://v2.listbox.com/member/?listname=spf-help [at] v2
--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/
-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help [at] v2
|
