Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SPF: Help

SPF Record Setup Question

 

 

SPF help RSS feed   Index | Next | Previous | View Threaded


wine at carlislewinery

Mar 20, 2008, 1:19 PM

Post #1 of 3 (992 views)
Permalink
SPF Record Setup Question

I'd like to setup an SPF record to prevent our business e-mails from being
spoofed. We send out e-mail under our domain, carlislewinery.com, via 3
different servers - mail.carlislewinery.com, smtp.sbcglobal.net, and
mail.sonic.net. I'm a little unclear on how to specify the latter two in
the record. Do I use mx: or a:? In other words, is it

"v=spf1 a mx mx:smtp.sbcglobal.net mx:mail.sonic.net ~all"

or is it

"v=spf1 a mx a:sbcglobal.net a:sonic.net ~all"

or is it something else?

Thanks in advance.

Mike Officer

Carlisle Winery & Vineyards
P.O. Box 556
Santa Rosa, CA 95402
(707) 566-7700 - Direct
(707) 566-7200 - Fax
www.carlislewinery.com


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


steve at teamITS

Mar 20, 2008, 1:49 PM

Post #2 of 3 (936 views)
Permalink
RE: SPF Record Setup Question [In reply to]

Carlisle Winery wrote on 3/20/2008 3:19:01 PM:

> We send out e-mail under our domain, carlislewinery.com, via 3
> different servers - mail.carlislewinery.com, smtp.sbcglobal.net, and
> mail.sonic.net. I'm a little unclear on how to specify the latter two
in
> the record. Do I use mx: or a:? In other words, is it
>
> "v=spf1 a mx mx:smtp.sbcglobal.net mx:mail.sonic.net ~all"
>
> or is it
>
> "v=spf1 a mx a:sbcglobal.net a:sonic.net ~all"

The first would mean that we should look up the MX for the
smtp.sbcglobal.net. The second example says to look up the host,
sbcglobal.net. I think what you want is "a:smtp.sbcglobal.net".

-----
SPF FAQ: http://www.openspf.org/FAQ
Common mistakes: http://www.openspf.org/FAQ/Common_mistakes

- Steve Yates
- ITS, Inc.
- Confucius say: Man trapped in pantry have butt in jam

~ Taglines by Taglinator - www.srtware.com ~

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


jay-spf at kajayr

Mar 20, 2008, 2:13 PM

Post #3 of 3 (941 views)
Permalink
Re: SPF Record Setup Question [In reply to]

On Thu, 2008-03-20 at 13:19 -0700, Carlisle Winery wrote:
> I'd like to setup an SPF record to prevent our business e-mails from being
> spoofed. We send out e-mail under our domain, carlislewinery.com, via 3
> different servers - mail.carlislewinery.com, smtp.sbcglobal.net, and
> mail.sonic.net. I'm a little unclear on how to specify the latter two in
> the record. Do I use mx: or a:? In other words, is it
>
> "v=spf1 a mx mx:smtp.sbcglobal.net mx:mail.sonic.net ~all"
>
> or is it
>
> "v=spf1 a mx a:sbcglobal.net a:sonic.net ~all"
>
> or is it something else?
>
> Thanks in advance.
>
> Mike Officer
>
>From what you have defined, the simplest for you would be:

"v=spf1 a a:smtp.sbcglobal.net a:mail.sonic.net ~all"

which is similar to your first (above) without the redundant mx (which
would cause two unnecessary dns lookups by servers receiving mail from
you).

As a rule, use the method which causes least number of lookups. "a"
causes one lookup, "mx" in this case causes two lookups. As the "a" and
"mx" ultimately resolve to the same IP, there would be two redundant
lookups for mail sent out via the other two servers.

Your second would not achieve what you want as sonic.net resolves to a
different IP from mail.sonic.net

Cheers
KAJAYR

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

SPF help RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.