1

We are building mail server to send mails for other domains.

We have multiple IP address and i have created "A" record like spf.example.com pointing to multiple IP's

Now I have asked client to include our spf.xyz.com in their SPF record to authorize send mails behalf of them.

We are getting error like

"- PermError SPF Permanent Error: No valid SPF record for included domain:"

What would be the problem? Is the process we are following is right?

  • 1
    The process seems okay to me. But the question is how the customer is implenting it. You can check it out easily with the domain name, using online tools, to see if it is correct. – Diamant May 14 at 9:55
  • 1
    Possible duplicate of What are SPF records, and how do I configure them? – Jenny D May 14 at 10:34
  • Since you have created an "A" record, the clients should use the "A" mechanism to use your record in their SPF records: "a:spf.xyz.com". If you instead create an SPF record for spf.xyz.com containing the multiple IP's "ip4:1.1.1.1 ip4:2.2.2.2 ip4:3.3.3.3" the clients can use the "include" mechanism "include:spf.xyz.com" – Lars Lind Nilsson May 14 at 11:38
1

From what I understand you have instructed your clients to include spf.example.com in their SPF record to allow your mailservers to send mail on their behalf.

I.e. Your customers now have something like this set up:

v=spf1 a mx  include:spf.protection.outlook.com include:spf.example.com -all

That is perfectly valid.

I have created "A" record like spf.example.com pointing to multiple IP's

That is probably the problem. AFAIK The include:spf.example.com mechanism is designed to include other SPF records, not A records

Instead of

spf.example.com. IN A 10.9.8.7
spf.example.com. IN A 192.168.0.1

a valid SPF record is needed, something along the line below is expected:

spf.example.com. IN TXT "v=spf1 ip4:10.9.8.7/32 ip4:192.168.0.1/32" 
  • It worked sir, Thanks alot. – Balus May 14 at 14:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.