Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top is allowing to connect your domain to their email servers. To validate the domain they give you the following instructions: enter image description here

In my domain registrar i've defined     86400   IN      TXT     v=spf1 ~all     86400   IN      MX      0       *******

As they asked, and it doesn't work.

I have also tried to define ******* with the trailing dot at the end and I saw that it automatically appends my fqdn to the end of the address. When I did that, the domain was verified correctly but occasionally it was de-verified (every time I refreshed it was either verified or not-verified)

What is the correct way to define it ?

Adding my complete record set:  86400   IN  NS  86400   IN  NS  86400   IN  A  86400   IN  CNAME  86400   IN  CNAME  86400   IN  TXT v=spf1 ~all  86400   IN  MX  0   ******
share|improve this question
up vote 1 down vote accepted

The syntax of DNS names that appear in zone files is that that if a final dot is not given, the current $ORIGIN is appended to the name. So when you define:

***    IN   MX   10

the meaning of this is that the MX record contains the name ""+whatever the value of $ORIGIN is at the time. Since the default $ORIGIN is the name of the zone, that means you're probably actually defining:

***    IN   MX   10***

So you certainly want to use the final dot in this context.

If you have the problem that "occasionally it was de-verified", then you might have some problem with your DNS setup. Check if your secondary nameservers are up to date and serving the same, correct, information as the primary. Related to this, make sure you didn't forget to update the SOA serial number when you updated the primary.

share|improve this answer
Thank you. How do I check the primary and the secondary nameservers are synced ? What's the SOA serial number ? – Michael Jun 22 '13 at 20:09
Using an online tool, I did see that nameserver SOAs do not agree on the serial number. This can be because of all the experiments I did and that I changed it recently and the change hasn't yet arrived from the master nameserver... – Michael Jun 22 '13 at 20:14
To check the serial number, use dig @<nameserver> *** soa. It should match between the primary and all secondaries. If your secondaries are configured correctly, they should get notified automatically when you increment the serial number on the primary and reload the zone. – Celada Jun 22 '13 at 20:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.