Querying my domain I get:

The TXT records found for your domain are:
v=spf1 ip4: a mx:wordswithfriends.net ~all 

So superficially it appears OK. However I also get the following message

SPF records should also be published in DNS as type SPF records.
No type SPF records found.

I want to make sure things are absolutely airtight. So in addition to TXT records I also want a pure SPF record. However I cannot figure out the format. Placing the same text in an SPF record does not seem to work.


At the moment I have a TXT record but not SPF record. When I cut and paste from TXT straight to SPF I get some type of crazy recursive DNS error so quickly deleted the SPF. I just want to know the correct format. Copying

v=spf1 ip4: a mx:wordswithfriends.net ~all 

straight into an SPF record doesn't work.

  • 2
    May I just in passing praise the original poster here? This is an excellent example of why the unending tendency to redact identifying content from questions on SF is seriously annoying. If he'd edited his SPF record so it just said mx:foo.com , neither of the two cogent answers I already see below could have been posted. Yes, sometimes stuff is confidential and needs redacting, but I believe it's way overused around these parts, to the detriment of all. – MadHatter Jan 28 '11 at 8:18

That SPF record looks correct to me, mine is quite similar to that.

Where do you get the SPF error? I checked the domain from my SPF client and it says it's okay.

You can always check the syntax here http://www.openspf.org/SPF_Record_Syntax and generate a new header here http://old.openspf.org/wizard.html?mydomain=example.com&submit=Go%21

$ spfquery -i -m test@wordswithfriends.net -h wordswithfriends.net
Please see http://www.openspf.org/why.html?sender=test%40wordswithfriends.net&ip= contains
spfquery: domain of test@wordswithfriends.net designates as permitted sender
Received-SPF: pass (spfquery: domain of test@wordswithfriends.net designates as permitted sender) client-ip=; envelope-from=test@wordswithfriends.net; helo=wordswithfriends.net;
  • +1 for the openspf.org links. It's a very clear and useful tool for creating SPF records. – Lekensteyn Jan 28 '11 at 13:52

If you are trying to add an SPF record in addition to the usual TXT record, the format is exactly the same. However, you need to use a version of BIND that supports SPF record types, i.e. 9.4.0 or later.

If your DNS software lacks support for "true" SPF records, I wouldn't worry about it. This record type is fairly new and you certainly won't need it for compatibility within the next 10 years or so. :)

  • 1
    This is the only answer (with just one +1) that address the question!!! – Alejandro Angelico Sep 19 '11 at 17:57

Did you just set the spf record? if so the other side's dns server might be caching your old zone without the spf record. So just wait a day and then try.

I went to http://www.kitterman.com/spf/validate.html and you passed.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.