Mailing List Archive: SPF: Help

SPF with long string

Index | Next | Previous | View Threaded

bass at afnet

Apr 9, 2008, 4:09 PM

Post #1 of 8 (632 views)
Permalink

SPF with long string

Hello all,
i'm trying to implement SPF and my problem is that i have lot of ip addresses and i cannot enter them all on 1 line, i get an error message from my dns (using named on linux). my SPF entry looks like

afnet.net. IN TXT "v=spf1 ip4:172.16.2.0/24 ip4:192.168.0.0/22 mx ~all"

i used private IP for the example but i have lot more IP addresses

Apr 9 22:54:49 ns1 named[16179]: dns_rdata_fromtext: db.afnet:15: ran out of space
Apr 9 22:54:49 ns1 named[16179]: zone afnet.net/IN: loading master file db.afnet: ran out of space

can you help please ?

thanks

Bass

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

lennon at orcon

Apr 9, 2008, 5:02 PM

Post #2 of 8 (606 views)
Permalink

Re: SPF with long string [In reply to]

On Wed, 2008-04-09 at 23:09 +0000, Bass wrote:
> Hello all,
> i'm trying to implement SPF and my problem is that i have lot of ip addresses and i cannot enter them all on 1 line, i get an error message from my dns (using named on linux). my SPF entry looks like
>
> afnet.net. IN TXT "v=spf1 ip4:172.16.2.0/24 ip4:192.168.0.0/22 mx ~all"
>
> i used private IP for the example but i have lot more IP addresses
>
> Apr 9 22:54:49 ns1 named[16179]: dns_rdata_fromtext: db.afnet:15: ran out of space
> Apr 9 22:54:49 ns1 named[16179]: zone afnet.net/IN: loading master file db.afnet: ran out of space
>

Why not give us the real record?

Thanks

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

csweeney at osubucks

Apr 9, 2008, 5:30 PM

Post #3 of 8 (606 views)
Permalink

Re: SPF with long string [In reply to]

>
> On Wed, 2008-04-09 at 23:09 +0000, Bass wrote:
>> Hello all,
>> i'm trying to implement SPF and my problem is that i have lot of ip
>> addresses and i cannot enter them all on 1 line, i get an error message
>> from my dns (using named on linux). my SPF entry looks like
>>
>> afnet.net. IN TXT "v=spf1 ip4:172.16.2.0/24 ip4:192.168.0.0/22 mx ~all"
>>
>> i used private IP for the example but i have lot more IP addresses
>>
>> Apr 9 22:54:49 ns1 named[16179]: dns_rdata_fromtext: db.afnet:15: ran
>> out of space
>> Apr 9 22:54:49 ns1 named[16179]: zone afnet.net/IN: loading master file
>> db.afnet: ran out of space
>>
>
> Why not give us the real record?
>

Yes why not? Your asking for help with a record your going to publish to
DNS where we can all look it up anyway, so when you need help let's start
with the real information so the people on here can help.

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

rickross at nishnanet

Apr 9, 2008, 5:34 PM

Post #4 of 8 (607 views)
Permalink

Re: SPF with long string [In reply to]

how many email servers do you actually have?
you only need the actual address used by your outbound smtp server.
----- Original Message -----
From: "Craig Whitmore" <lennon[at]orcon.net.nz>
To: <spf-help[at]v2.listbox.com>
Sent: Wednesday, April 09, 2008 7:02 PM
Subject: Re: [spf-help] SPF with long string

>
> On Wed, 2008-04-09 at 23:09 +0000, Bass wrote:
>> Hello all,
>> i'm trying to implement SPF and my problem is that i have lot of ip
>> addresses and i cannot enter them all on 1 line, i get an error message
>> from my dns (using named on linux). my SPF entry looks like
>>
>> afnet.net. IN TXT "v=spf1 ip4:172.16.2.0/24 ip4:192.168.0.0/22 mx ~all"
>>
>> i used private IP for the example but i have lot more IP addresses
>>
>> Apr 9 22:54:49 ns1 named[16179]: dns_rdata_fromtext: db.afnet:15: ran
>> out of space
>> Apr 9 22:54:49 ns1 named[16179]: zone afnet.net/IN: loading master file
>> db.afnet: ran out of space
>>
>
> Why not give us the real record?
>
> Thanks
>
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.org
> Modify Your Subscription: http://www.listbox.com/member/
> Archives: http://www.listbox.com/member/archive/1020/=now
> RSS Feed: http://www.listbox.com/member/archive/rss/1020/
> Powered by Listbox: http://www.listbox.com
>
>
>
> --
> No virus found in this incoming message.
> Checked by AVG.
> Version: 7.5.519 / Virus Database: 269.22.10/1367 - Release Date: 4/9/2008
> 7:10 AM
>
>

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

bass at afnet

Apr 10, 2008, 10:01 AM

Post #5 of 8 (600 views)
Permalink

Re: SPF with long string [In reply to]

Dear All,
Sorry, i was not trying to hide informations but it was very long string :)

Anyway, Rick is right, i wanted to add all my user ip addresses but i don't
need that, i just need my mail server (mmail.afnet.net).

So my SPF record in my DNS server (BIND) need 2 lines

afnet.net. IN TXT "v=spf1 mx ~all"
mmail.afnet.net. IN TXT "v=spf1 a -all"
is that correct ?

thanks

----- Original Message -----
From: "Chris Sweeney" <csweeney[at]osubucks.org>
To: <spf-help[at]v2.listbox.com>
Sent: Thursday, April 10, 2008 12:30 AM
Subject: Re: [spf-help] SPF with long string

>
>>
>> On Wed, 2008-04-09 at 23:09 +0000, Bass wrote:
>>> Hello all,
>>> i'm trying to implement SPF and my problem is that i have lot of ip
>>> addresses and i cannot enter them all on 1 line, i get an error message
>>> from my dns (using named on linux). my SPF entry looks like
>>>
>>> afnet.net. IN TXT "v=spf1 ip4:172.16.2.0/24 ip4:192.168.0.0/22 mx ~all"
>>>
>>> i used private IP for the example but i have lot more IP addresses
>>>
>>> Apr 9 22:54:49 ns1 named[16179]: dns_rdata_fromtext: db.afnet:15: ran
>>> out of space
>>> Apr 9 22:54:49 ns1 named[16179]: zone afnet.net/IN: loading master file
>>> db.afnet: ran out of space
>>>
>>
>> Why not give us the real record?
>>
>
> Yes why not? Your asking for help with a record your going to publish to
> DNS where we can all look it up anyway, so when you need help let's start
> with the real information so the people on here can help.
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.org
> Modify Your Subscription: http://www.listbox.com/member/
> Archives: http://www.listbox.com/member/archive/1020/=now
> RSS Feed: http://www.listbox.com/member/archive/rss/1020/
> Powered by Listbox: http://www.listbox.com

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

jay-spf at kajayr

Apr 10, 2008, 6:12 PM

Post #6 of 8 (594 views)
Permalink

Re: SPF with long string [In reply to]

On Thu, 2008-04-10 at 17:01 +0000, Bass wrote:
> Dear All,
> Sorry, i was not trying to hide informations but it was very long string :)
>
> Anyway, Rick is right, i wanted to add all my user ip addresses but i don't
> need that, i just need my mail server (mmail.afnet.net).
>
> So my SPF record in my DNS server (BIND) need 2 lines
>
> afnet.net. IN TXT "v=spf1 mx ~all"
> mmail.afnet.net. IN TXT "v=spf1 a -all"
> is that correct ?
>
> thanks
>
> ----- Original Message -----
> From: "Chris Sweeney" <csweeney[at]osubucks.org>
> To: <spf-help[at]v2.listbox.com>
> Sent: Thursday, April 10, 2008 12:30 AM
> Subject: Re: [spf-help] SPF with long string

You would only add <<mmail.afnet.net. IN TXT "v=spf1 a -all">> if you
intended to use the form <<someone[at]mmail.afnet.net>> otherwise you can
protect mmail.afnet.net with:
mmail.afnet.net. IN TXT "v=spf1 -all"
meaning that no mail should originate from the domain mmail.afnet.net

Cheers
KAJAYR

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

rob.macgregor at gmail

Apr 10, 2008, 11:26 PM

Post #7 of 8 (594 views)
Permalink

Re: SPF with long string [In reply to]

On Fri, Apr 11, 2008 at 2:12 AM, KAJAYR <jay-spf[at]kajayr.com> wrote:
>
> You would only add <<mmail.afnet.net. IN TXT "v=spf1 a -all">> if you
> intended to use the form <<someone[at]mmail.afnet.net>> otherwise you can
> protect mmail.afnet.net with:
> mmail.afnet.net. IN TXT "v=spf1 -all"
> meaning that no mail should originate from the domain mmail.afnet.net

Except when the mail server uses the HELO/EHLO string
"mmail.afnet.net", in which case the OPs SPF record was correct -
yours would result in mail being rejected:

http://www.openspf.org/FAQ/Common_mistakes#helo

--
Please keep list traffic on the list.

Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

jay-spf at kajayr

Apr 11, 2008, 2:22 AM

Post #8 of 8 (593 views)
Permalink

Re: SPF with long string [In reply to]

On Fri, 2008-04-11 at 07:26 +0100, Rob MacGregor wrote:
> On Fri, Apr 11, 2008 at 2:12 AM, KAJAYR <jay-spf[at]kajayr.com> wrote:
> >
> > You would only add <<mmail.afnet.net. IN TXT "v=spf1 a -all">> if you
> > intended to use the form <<someone[at]mmail.afnet.net>> otherwise you can
> > protect mmail.afnet.net with:
> > mmail.afnet.net. IN TXT "v=spf1 -all"
> > meaning that no mail should originate from the domain mmail.afnet.net
>
> Except when the mail server uses the HELO/EHLO string
> "mmail.afnet.net", in which case the OPs SPF record was correct -
> yours would result in mail being rejected:
>
> http://www.openspf.org/FAQ/Common_mistakes#helo

Sorry, I stand corrected

Thanks
KAJAYR

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com