Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have multiple domains with multiple mailservers on each. they all send with the same return path address. so x@bounce.bouncesent.com for instance.

I want to authorize any host on my domains ( abx.com, sksk.com, rwfjsdj.com and sssdr.com ) to send for x@bounce.bouncesent.com.

The domains listed above are mine and do not have spf records at this time.

I tried

v=spf1 a a:abx.com a:sksk.com a:rwfjsdj.com sssdr.com ~all

but that did not seem to work,because I may have multiple mailservers for abx.com etc.

Any ideas?

share|improve this question

3 Answers 3

You can allow each domain's MX in that particular domain's SPF record. Then for the 'bounce.bouncesent.com' domain, include the other domains

TXT  "v=spf1 mx include:aaa.com include:bbb.com -all"
share|improve this answer

Wildcard SPF should in theory work (http://tools.ietf.org/html/rfc4408#section-3.1.5) but the reality is that it isn't totally reliable. It isn't too hard to setup the individual entries per domain in form of

v=spf1 a mx a:mx1.example1.com a:mx1.example2.com a:mx1.example3.com ~all

but some dns setups have a limit of the number of servers you have. It may be better to do it by IP address if the domains are hosted on the same box. Will give less maintenance.

share|improve this answer

Try setting the wildcard record for IN TXT, eg:

* IN TXT "v=spf1 -all"
share|improve this answer
    
you mean have this entry in each of my domains and then include it in the bounce.bouncesent.com spf record? –  Brian G Aug 28 '09 at 17:12
    
Sorry, I thought you meant you wants subdomains of those domains all authenticated. SPF works based on IP addresses; not domains - so you can authorize the list of IPs that will be sending mail for bounce.bouncesent.com or the other domains. –  Dave Drager Aug 28 '09 at 17:29
    
SPF does allow domain names. See openspf.org/SPF_Record_Syntax for examples –  Ryaner Aug 28 '09 at 20:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.