Mailing List Archive

----- Original Message -----
From: <martin@martin-cz-smith.com>
To: "undisclosed-recipients:"
Sent: Monday, March 08, 2010 6:25 PM
Subject: [spf-help] SPF Modification.


>
>
> Hi there.
>
> I have a simple existing SPF record for orioncinema.com which is a single
> IP/MX combo.

What is a "single IP/MX combo" ? Do you mean that there's just one single
host involved (on the outside of a firewall perhaps), doing all kind of
stuff like mail, web, ftp etc. ?

If so:

Your policy descibes hosts, not functions. If there's only one host to
describe, there should only be one host in your record.

> v=spf1 a mx ip4:213.175.197.152 mx:mail.orioncinema.com -all

a=213.175.197.152
mx=mail.orioncinema.com=213.175.197.152
ip4:213.175.197.152=213.175.197.152
mx:mail.orioncinema.com does not exist

> This is working fine.

"if the connecting host is not 213.175.197.152, then see if it is
213.175.197.152, if not that then see if it is 213.175.197.152. " is not
fine.


> However, my client has subscribed to a service which means the following
> IP address 217.33.105.158 needs to be allowed to send mail on behalf of
> orioncinema.com.
>
> I believe that the new SPF record should be as follows...
>
> v=spf1 a mx ip4:213.175.197.152 ip4:217.33.105.158
> mx:mail.orioncinema.com -all

I believe

v=spf1 ip4:213.175.197.152 ip4:217.33.105.158 -all

would be better.




-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

At 17:25 08/03/2010 Monday, martin@martin-cz-smith.com wrote:


>Hi there.
>
>I have a simple existing SPF record for orioncinema.com which is a single IP/MX combo.
>
>v=spf1 a mx ip4:213.175.197.152 mx:mail.orioncinema.com -all
>
>This is working fine. However, my client has subscribed to a service which means the following IP address 217.33.105.158 needs to be allowed to send mail on behalf of orioncinema.com.
>
>I believe that the new SPF record should be as follows...
>
>v=spf1 a mx ip4:213.175.197.152 ip4:217.33.105.158 mx:mail.orioncinema.com -all

ok first order correctly ips first then optionally a's then mx's {if needed} and last includes

so v=spf1 ip4:213.175.197.152 ip4:217.33.105.158 a mx -all
{as mx:mail.orioncinema.com MUST be removed it is a syntax error as mail.ori.. has no MX records??}

next considering the a and the mx also result in ip4:213.175.197.152

what was the point??? apart from to waste everyones time/resources on the 3 extra dns lookups they cause??

so your spf should be

v=spf1 ip4:213.175.197.152 ip4:217.33.105.158 -all




-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

> I believe
>
> v=spf1 ip4:213.175.197.152 ip4:217.33.105.158 -all
>
> would be better.


I believe

v=spf1 ip4:213.175.197.152 ?ip4:217.33.105.158 -all

would be better. :-)

Vic.




-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com