Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

My txt entry for my domain is as follows:

"v=spf1 a -all"

I have also tried to use ptr in addition to a. However, I'm not sure I fully understand the difference between them. PTR seems to do a reverse lookup on the domain, whereas A simply references the A record in the zone file?

The header response from Gmail is:

Received-SPF: unknown ( domain of uses a mechanism not recognized by this client. unknown mechanisms: ))

Authentication-Results:; spf=permerror ( domain of uses a mechanism not recognized by this client. unknown mechanisms: )); dkim=neutral (no key)

share|improve this question

migrated from Dec 20 '09 at 17:19

This question came from our site for professional and enthusiast programmers.

marked as duplicate by MadHatter, masegaloeh, Ward, mdpc, fuero Mar 4 '15 at 12:44

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

The correct TXT record for googlemail is "v=spf1 ~all". You should also note the usage of ~all versus -all.

share|improve this answer
Honestly, I don't think that is the cause because it's complaining about the query: "domain of uses a mechanism not recognized by this client", but I'm going to try. The world of trial and error begins. Thanks for your input. – user29771 Dec 21 '09 at 16:41
What is the meaning of ~all versus -all? The documentation is a bit weak on this: – Torben Gundtofte-Bruun Aug 13 '10 at 13:49

Please see this page: Please see this page from Google:

Publishing an SPF record that uses -all instead of ~all may result in delivery problems. See >Google IP address ranges for details about the addresses for the Google Apps mail servers.

EDIT: You should also really be using DKIM. With DMARC standardization approaching, this is highly important.

share|improve this answer