We keep getting SPF check fail from certain vendors and I am not sure if our SPF record is correct either, it goes as follows:
v=spf1 mx:domain.org include:anotherdomain.com ~all
Now some of the emails we receive back state that "10.0.0.0" are not allowed to send in the name of "domain.com".
10.0.0.0 IS the IP for domain.com
10.0.0.1 is the IP for mail.domain.com
How should our SPF record be configured? Should it have both IP addresses or specify only the mail server IP, all the domains included, mail.domain.com, domain.com?
Like this?
v=spf1 mx:10.0.0.0/31 include:domain.com include:anotherdomain.com ~all
v=spf1 mx:mail.domain.com include:anotherdomain.com ~all
I have also verified the MX record is correct on our DNS servers.