11

Querying my domain I get:

The TXT records found for your domain are:
v=spf1 ip4:50.22.72.198 a mx:wordswithfriends.net ~all

So superficially it appears OK. However I also get the following message

SPF records should also be published in DNS as type SPF records.
No type SPF records found.

I want to make sure things are absolutely airtight. So in addition to TXT records I also want a pure SPF record. However I cannot figure out the format. Placing the same text in an SPF record does not seem to work.

Edit:

At the moment I have a TXT record but not SPF record. When I cut and paste from TXT straight to SPF I get some type of crazy recursive DNS error so quickly deleted the SPF. I just want to know the correct format. Copying

v=spf1 ip4:50.22.72.198 a mx:wordswithfriends.net ~all

straight into an SPF record doesn't work.

splattne
  • 28,508
  • 20
  • 98
  • 148
deltanovember
  • 531
  • 2
  • 7
  • 13
  • 2
    May I just in passing praise the original poster here? This is an excellent example of why the unending tendency to redact identifying content from questions on SF is seriously annoying. If he'd edited his SPF record so it just said mx:foo.com , neither of the two cogent answers I already see below could have been posted. Yes, sometimes stuff is confidential and needs redacting, but I believe it's **way** overused around these parts, to the detriment of all. – MadHatter Jan 28 '11 at 08:18

3 Answers3

12

If you are trying to add an SPF record in addition to the usual TXT record, the format is exactly the same. However, you need to use a version of BIND that supports SPF record types, i.e. 9.4.0 or later.

If your DNS software lacks support for "true" SPF records, I wouldn't worry about it. This record type is fairly new and you certainly won't need it for compatibility within the next 10 years or so. :)

Community
  • 1
Martin
  • 716
  • 3
  • 6
8

That SPF record looks correct to me, mine is quite similar to that.

Where do you get the SPF error? I checked the domain from my SPF client and it says it's okay.

You can always check the syntax here http://www.openspf.org/SPF_Record_Syntax and generate a new header here http://old.openspf.org/wizard.html?mydomain=example.com&submit=Go%21

$ spfquery -i 50.22.72.198 -m test@wordswithfriends.net -h wordswithfriends.net
pass
Please see http://www.openspf.org/why.html?sender=test%40wordswithfriends.net&ip=50.22.72.198&receiver=spfquery: 50.22.72.198 contains 50.22.72.198
spfquery: domain of test@wordswithfriends.net designates 50.22.72.198 as permitted sender
Received-SPF: pass (spfquery: domain of test@wordswithfriends.net designates 50.22.72.198 as permitted sender) client-ip=50.22.72.198; envelope-from=test@wordswithfriends.net; helo=wordswithfriends.net;
lynxman
  • 9,397
  • 3
  • 25
  • 28
5

Did you just set the spf record? if so the other side's dns server might be caching your old zone without the spf record. So just wait a day and then try.

I went to http://www.kitterman.com/spf/validate.html and you passed.

Mike
  • 22,310
  • 7
  • 56
  • 79