Mailing List Archive

Robin Miller wrote:
> I send e-mail from my cbar.pro domain through website hosting service
> bluehost.com. Bluehost has several outgoing mail servers, all with names
> of the form *.bluehost.com, but bluehost has has no dedicated outgoing
> mail server to which they can assign my domain.
>
> Is include:bluehost.com what I want to use in the SPF record for cbar.pro?

Yes, that's what it has been designed for. The additions below are the
reasons why you cannot use "redirect=bluehost.com"

> The full SPF record, at this point, is;
>
> "v=spf1 include:bluehost.com ip4:209.225.8.76 ip4:209.225.8.224
> ip4:38.100.176.0/24 ?all"
>
> 209.225.8.76 (mail.charterinternet.com) and 209.225.8.224
> (mail.charter.net) are both for Charter, my ISP, as I have set up e-mail
> hosting for cbar.pro through them.

Why don't you just include:charter.net? That way you don't have to
keep watching what addresses they use. (It has ip4:209.225.8.0/24)

> 38.100.176.0 is the outgoing mail server for a commercial service I also
> use sometimes.



-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

On 16-Jan-10, at 4:02 AM, Alessandro Vesely wrote:

> Robin Miller wrote:
>> I send e-mail from my cbar.pro domain through website hosting
>> service bluehost.com. Bluehost has several outgoing mail servers,
>> all with names of the form *.bluehost.com, but bluehost has has no
>> dedicated outgoing mail server to which they can assign my domain.
>> Is include:bluehost.com what I want to use in the SPF record for
>> cbar.pro?
>
> Yes, that's what it has been designed for. The additions below are
> the reasons why you cannot use "redirect=bluehost.com"

This is correct

>
>> The full SPF record, at this point, is;
>> "v=spf1 include:bluehost.com ip4:209.225.8.76 ip4:209.225.8.224
>> ip4:38.100.176.0/24 ?all"
>> 209.225.8.76 (mail.charterinternet.com) and 209.225.8.224
>> (mail.charter.net) are both for Charter, my ISP, as I have set up e-
>> mail hosting for cbar.pro through them.
>
> Why don't you just include:charter.net? That way you don't have to
> keep watching what addresses they use. (It has ip4:209.225.8.0/24)


No, he can't use 'include:charter.net' because he is not relaying mail
through charter.net. He is only including the IP addresses assigned to
him by charter.net in his SPF policy.

--
Gino Cerullo

Pixel Point Studios
21 Chesham Drive
Toronto, ON M3M 1W6

416-247-7740



-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

At 06:35 16/01/2010 Saturday, Robin Miller wrote:


>Hi everyone,
>
>I send e-mail from my cbar.pro domain through website hosting service bluehost.com. Bluehost has several outgoing mail servers, all with names of the form *.bluehost.com, but bluehost has has no dedicated outgoing mail server to which they can assign my domain.
>
>Is include:bluehost.com what I want to use in the SPF record for cbar.pro?

if and only if bluhost.com has an spf record that points to all the servers their customers will use {not just the ones they user@bluehost.com send from}

for example i have my spf record at alandoherty.net, {which includes my ips and my phones and others}
customers of mine on the other hand are directed to use include:_client-spf1.alandoherty.net for their spf1 records

if bluehost does/offers something similar it should be used

also i would recommend using an include for the charter servers also if they provide one

but if not at least don't use the raw ip's for ips outside your administrative control instead use a:mail.charter.net etc.

also for speed put ip's at start of record then a's then last includes



>The full SPF record, at this point, is;
>
>"v=spf1 include:bluehost.com ip4:209.225.8.76 ip4:209.225.8.224 ip4:38.100.176.0/24 ?all"
>
>209.225.8.76 (mail.charterinternet.com) and 209.225.8.224 (mail.charter.net) are both for Charter, my ISP, as I have set up e-mail hosting for cbar.pro through them.

so the above re-done as

v=spf1 ip4:38.100.176.0/24 a:mail.charterinternet.com a:mail.charter.net include:bluehost.com

or

v=spf1 ip4:38.100.176.0/24 include-suggested-by-charter include-suggested-by-bluehost

as providers/isps includes should never be assumed to be on their bare domain as often this spf is wider than their own hosts as it has to allow staff to mail from all originating services {often 3rd party pagers etc}

and in some cases they are like my own where if included mistakenly by a customer would cause their mail to fail entirely unless accidentally their username@ matched a real live username@alandoherty.net as all other usernames return v=spf1 -all

>38.100.176.0 is the outgoing mail server for a commercial service I also use sometimes.
>
>If I'm sure this is correct, I might change ?all to -all.
>
>Thanks so much!
>
>--Robin Miller
>
>
>
>
>-------------------------------------------
>Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
>Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>
>Archives: https://www.listbox.com/member/archive/1020/=now
>RSS Feed: https://www.listbox.com/member/archive/rss/1020/
>Powered by Listbox: http://www.listbox.com



-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com