Mailing List Archive

IPv6 SPF Records
I've noticed some SPF-clueful mail servers are denying mail sent from an
IPv6 source address. Has anyone else been bumping into this issue if your
mail servers are v6-enabled? If so, what did you do? Are there any
guidelines for configuring SPF records for IPv6 netblocks? I've looked in
the spf documentation, but assume this may be one of those "hidden
configuration" details. :-)

Thanks.

- Eric
IPv6 SPF Records [ In reply to ]
Hi Eric,

Correct syntax should be.
domain.tld. 86400 IN TXT "v=spf1 ip4:0.0.0.0/0
ip6:::/0 ?all"

At least thats what we use on our domains.

thanks

j

----- Original Message -----
From: <eric-list-ipv6-ops@catastrophe.net>
To: <ipv6-ops@lists.cluenet.de>
Sent: Monday, September 26, 2005 5:51 PM
Subject: IPv6 SPF Records


> I've noticed some SPF-clueful mail servers are denying mail sent from an
> IPv6 source address. Has anyone else been bumping into this issue if your
> mail servers are v6-enabled? If so, what did you do? Are there any
> guidelines for configuring SPF records for IPv6 netblocks? I've looked in
> the spf documentation, but assume this may be one of those "hidden
> configuration" details. :-)
>
> Thanks.
>
> - Eric
>
IPv6 SPF Records [ In reply to ]
On Mon, 2005-09-26 at 10:51:33 -0500, eric-list-ipv6-ops@catastrophe.net proclaimed...

> I've noticed some SPF-clueful mail servers are denying mail sent from an
> IPv6 source address. Has anyone else been bumping into this issue if your
> mail servers are v6-enabled? If so, what did you do? Are there any
> guidelines for configuring SPF records for IPv6 netblocks? I've looked in
> the spf documentation, but assume this may be one of those "hidden
> configuration" details. :-)

Thanks to all of the replies I received off-list (and on-list as well).
Turns out it's not as bad as you may think. Here's my spf record I've
created.

$ host -t txt nxio.us
nxio.us descriptive text "v=spf1 ip4:207.227.243.192/28
ip6:[2001:4830:e5:6::2] ip6:[2001:468:1202:301:20a:5eff:fe21:2f6b]
ip6:[2001:4830:2280::]/48 ip6:[2001:4830:e5:8::2] ip6:[2001:4830:2281::]/48
mx -all"

Seems to be working, thus far. I could send mail to some spf-enabled hosts
that I couldn't send to before.

thanks.