Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My txt entry for my domain is as follows:

txt --> "v=spf1 a ip4:aspmx.googlemail.com ptr:aspmx.googlemail.com include:aspmx.googlemail.com -all"

I have also tried to use 'ptr' in addition to 'a', however, I'm not sure I fully understand the difference between them. PTR seems to do a reverse lookup on the domain, where as A simply references the A record in the zone file?

The header response from gmail is:

Received-SPF: unknown (google.com: domain of do-not-reply@mydomain.com uses a mechanism not recognized by this client. unknown mechanisms: ))

Authentication-Results: mx.google.com; spf=permerror (google.com: domain of do-not-reply@mydomain.com uses a mechanism not recognized by this client. unknown mechanisms: )) smtp.mail=do-not-reply@mydomain.com; dkim=neutral (no key) header.i=@mydomain.com

Thanks for any suggestions.

share|improve this question

migrated from stackoverflow.com Dec 20 '09 at 17:19

This question came from our site for professional and enthusiast programmers.

add comment

2 Answers

The correct TXT record for googlemail is "v=spf1 include:aspmx.googlemail.com ~all". You should also note the usage of ~all versus -all.

share|improve this answer
    
Honestly, I don't think that is the cause because it's complaining about the mydomain.com query: "domain of do-not-reply@mydomain.com uses a mechanism not recognized by this client", but I'm going to try. The world of trial and error begins. Thanks for your input. –  user29771 Dec 21 '09 at 16:41
    
What is the meaning of ~all versus -all? The documentation is a bit weak on this: openspf.org/SPF_Record_Syntax –  Torben Gundtofte-Bruun Aug 13 '10 at 13:49
add comment

Please see this page: Please see this page from Google: http://support.google.com/a/bin/answer.py?hl=en&answer=178723

Publishing an SPF record that uses -all instead of ~all may result in delivery problems. See >Google IP address ranges for details about the addresses for the Google Apps mail servers.

EDIT: You should also really be using DKIM. With DMARC standardization approaching, this is highly important.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.