PowerMTA Support Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

PowerMTA 5.5r1 is out!!!!  Please contact support@port25.com for a license and download access.

Pages: [1] 2

Author Topic: Long SPF record?  (Read 69548 times)

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Long SPF record?
« on: August 25, 2011, 07:30:05 PM »
I have to add around 28-30 IPs to a subdomain's SPF record... But my dns hosting provider does not support DNS records more than 250 characters..

Can I split SPF records into multiple parts? How can I add 30 IPs into a SPF record?

Thanks!
Baris
Logged

CaLViN

  • Hero Member
  • *****
  • Karma: +43/-2
  • Posts: 1233
  • Hasan Kurtoglu
    • PowerMTA Administration Service
Re: Long SPF record?
« Reply #1 on: August 25, 2011, 07:32:34 PM »
Hi,
You can use "include".
Example:

"v=spf1 a mx ip4:75.126.50.50 include:spf1.domain.com include:spf2.domain.com include:spf3.domain.com include:spf4.domain.com -all"
Logged

Professional PowerMTA Administrator - Deliverability Expert

Contact me for Consultancy needs!

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #2 on: August 26, 2011, 09:46:25 AM »
But if you include sub.domain.com for the spf record of sub.domain.com, SPF fails due to a circular reference (loop)...  Any ideas to workaround this?
Logged

CaLViN

  • Hero Member
  • *****
  • Karma: +43/-2
  • Posts: 1233
  • Hasan Kurtoglu
    • PowerMTA Administration Service
Re: Long SPF record?
« Reply #3 on: August 26, 2011, 11:45:11 AM »
:)
Suppose that you have 30 unique ips from different classes.

Your spf record would be like :


"v=spf1 a mx ip4:75.126.50.50 include:spf1.domain.com include:spf2.domain.com include:spf3.domain.com include:spf4.domain.com  include:spf5.domain.com -all"

Then you may add 6 records(ips) per spf record.

Your spf record for spf1.domain.com would be like :

"v=spf1 a mx ip4:75.126.50.50 ip4:85.126.50.50 ip4:95.126.50.50 ip4:45.126.50.50 ip4:65.126.50.50 ip4:25.126.50.50  -all"

You would do that for the rest of the records.

There is nothing recursive here.
Logged

Professional PowerMTA Administrator - Deliverability Expert

Contact me for Consultancy needs!

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #4 on: August 26, 2011, 11:47:07 AM »
I have 1 subdomain and 30 different IP addresses.. That's why I'm having hard times configuring my SPF.

In your approach, do you recommend creating A records just for SPF setup, and group several IPs in spf A records, and then include the A records in the main SPF ?
Logged

CaLViN

  • Hero Member
  • *****
  • Karma: +43/-2
  • Posts: 1233
  • Hasan Kurtoglu
    • PowerMTA Administration Service
Re: Long SPF record?
« Reply #5 on: August 26, 2011, 11:48:51 AM »
Baris,
Those ips are on different C classes ?
Or on the same B or A ?

Logged

Professional PowerMTA Administrator - Deliverability Expert

Contact me for Consultancy needs!

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #6 on: August 26, 2011, 11:49:33 AM »
Almost all in different classes, totally random IPs.
Logged

CaLViN

  • Hero Member
  • *****
  • Karma: +43/-2
  • Posts: 1233
  • Hasan Kurtoglu
    • PowerMTA Administration Service
Re: Long SPF record?
« Reply #7 on: August 26, 2011, 11:52:52 AM »
Okey then you should do as i have instructed on my previos message.
I think your mind is mixed up cos i have used subdomains,you couldnt get the logic.
With include directive,you can get any domains spf record included on your domain.


mydomain.com SPF record shall be :

"v=spf1 a mx ip4:75.126.50.50 include:killme.com include:loveme.com include:biteme.com include:kissme.com  include:weareallcrazy.com -all"
Logged

Professional PowerMTA Administrator - Deliverability Expert

Contact me for Consultancy needs!

luca.rea

  • Jr. Member
  • **
  • Karma: +1/-17
  • Posts: 27
    • ContactLab
Re: Long SPF record?
« Reply #8 on: August 26, 2011, 11:57:33 AM »
When you define spf you must not add "include" for the (sub)domain itself into the record
Logged

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #9 on: August 26, 2011, 12:22:53 PM »
Do I need MX or A records for those spf1.domain.com/spf2.domain.com settings? Or just TXT settings will be enough?
Logged

CaLViN

  • Hero Member
  • *****
  • Karma: +43/-2
  • Posts: 1233
  • Hasan Kurtoglu
    • PowerMTA Administration Service
Re: Long SPF record?
« Reply #10 on: August 26, 2011, 12:31:16 PM »
Quote from: baris on August 26, 2011, 12:22:53 PM
Do I need MX or A records for those spf1.domain.com/spf2.domain.com settings? Or just TXT settings will be enough?
Just txt records like you do on your main domain.
Logged

Professional PowerMTA Administrator - Deliverability Expert

Contact me for Consultancy needs!

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #11 on: August 26, 2011, 12:32:46 PM »
Thanks, I completed the setup and waiting for a dns update, I'll test after that..
Logged

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #12 on: August 26, 2011, 12:50:34 PM »
I have a problem with this SPF setup:

Found v=spf1 record for bounces.directiq.com:
v=spf1 a mx include:spf1.directiq.com include:spf2.directiq.com include:spf3.directiq.com include:spf4.directiq.com include:spf5.directiq.com include:spf6.directiq.com ~all

evaluating...
Results - PermError SPF Permanent Error: Too many DNS lookups
Logged

luca.rea

  • Jr. Member
  • **
  • Karma: +1/-17
  • Posts: 27
    • ContactLab
Re: Long SPF record?
« Reply #13 on: August 26, 2011, 03:41:03 PM »
Can you post all SPF records?
Logged

baris

  • Jr. Member
  • **
  • Karma: +2/-7
  • Posts: 21
Re: Long SPF record?
« Reply #14 on: August 26, 2011, 05:02:22 PM »
I decided to use a /16 setting for all my IP range, thanks for all the help offers..
Logged
Pages: [1] 2
« previous next »