CODEWITHSUNDEEP
dnsspf
Hari Krishna
Hari Krishna

Reputation: 25

Whats wrong in this SPF syntax?

I am not very familiar with SPF records so I need a bit of help setting up my SPF record correctly.

Below is a record I created using online tutorials

v=spf1 a mx ip4:192.186.236.104 include:_spf.google.com include:bmsend.com include:postbox.pidatacenters.com ~all

when i check in http://mxtoolbox.com/SuperTool.aspx?action=spf%3apidatacenters.com%3a192.186.236.104&run=toolpage#

it shows everything is right

fraudmarc.com/spf-record-check/

in this website it shows an error like this

enter image description here

Give me the solutions

Thanks in advance.

Upvotes: 1

Views: 5117

Answers (2)

Henry
Henry

Reputation: 3013

The reason why your getting the syntax error with that test is because any valid syntax checker authenticates the entire SPF Statement. Which means it has to test the SPF records of every included statement.

When it checks the include for "postbox.pidatacenters.com" in the SPF syntax for pidatacenters.com, it will see this.

v=spf1 include:_spf.google.com postbox.pidatacenters.com ~all

Which is invalid.

Anyway, you should follow Synchro's Advice and change the records to what he stated.

Also testing with the site Synchro recommended is fine, but it relies on a lot of expert knowledge you might not have. You might think you're emailing one way, but you're really not.

It's better to get a real live example using a reflector, just send an email to this tool and you'll get results back telling you if the SPF is correct, I always use multiple reflectors, to ensure things are accurate.

 [email protected]

You can also use an email testing tool that doesn't respond in email, but display the results on-screen.

Upvotes: 0

Synchro
Synchro

Reputation: 37750

A few things wrong here. The definitive SPF checker is Scott Kitterman's. It finds this error:

PermError SPF Permanent Error: Unknown mechanism found: postbox.pidatacenters.com

It's not clear why this is presented as this particular error because the syntax itself is valid, but you have a recursive definition - your SPF includes postbox.pidatacenters.com, but the SPF for that domain includes itself, which makes no sense. It also contains the google SPF, so you don't need to include that again.

I suggest you set your SPF records to these. For pidatacenters.com:

v=spf1 ip4:192.186.236.104 mx include:bmsend.com include:postbox.pidatacenters.com ~all

you don't need the a clause in there because it resolves to the same IP as you already listed. It's polite to put ip clauses first as they are fastest to resolve for receivers, as they do not require DNS lookups.

For postbox.pidatacenters.com:

v=spf1 include:_spf.google.com ~all

Upvotes: 2

Related Questions