?
Solved

Warning message in dnsstuff.com for SPF

Posted on 2007-11-30
7
Medium Priority
?
462 Views
Last Modified: 2012-06-27
If I check my domain on dnsstuff.com, it says that I dont have an SPF Record:

Your domain does not have an SPF record. This means that spammers can easily send out E-mail that looks like it came from your domain, which can make your domain look bad (if the recipient thinks you really sent it), and can cost you money (when people complain to you, rather than the spammer). You may want to add an SPF record ASAP, as 01 Oct 2004 was the target date for domains to have SPF records in place (Hotmail, for example, started checking SPF records on 01 Oct 2004).

So I added the following record to the Forward Lookup Zones in DNS:
(same as parent folder) Text (TXT) v=spf1 ip4:<ip address comes here> -all

But the warning does not go away.
I would like to get rid of this warning for my very basic network: 1 DNS server, 1 Domain, Exchange 2003 and 3 other computers connected to the server.
I know it can go pretty granular. I just want the basic stuff for SPF&
What do I do wrong?
0
Comment
Question by:mihaisz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 20386722
I think this is how it's supposed to look.

domain.com. TXT "v=spf1 mx -all"
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 1500 total points
ID: 20387725
999 of 1000 sites will report this message - the spf record is very rarely used to be truthful.

This is a link to a Microsoft on-line wixard that walks you through it
http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/

Keith

0
 
LVL 51

Expert Comment

by:Netman66
ID: 20388070
Nice link Keith - I had no idea this existed!

0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20388180
To be truthful nor did i till last week - I found it for a previous asker lol :)

mihaisz, are you hosting your own external dns or is an ISP doing it for you?
0
 

Author Comment

by:mihaisz
ID: 20437839
Hi Keith,
Sorry for the delay - just got back from vacation.
I am hosting my own DNS.
I ran the wizard and got a string that I entered as a TXT record to my DNS (v=spf1 a mx ptr ip4:<IP address> mx:mail.<mydomain.com> a:<my-second-domain.com> a:<my-third-domain.com> ~all).
This is what dnsmgmt shows:
Left panel:
DNS
      CRM
            Forward Lookup Zones
                  MBS.LOCAL
Right panel:
(same as parent folder)            Text(TXT)       v=spf1 a mx ptr ip4:<IP&.

DNSStuff is still saying that I have no SPF record&
Do I have to publish the TXT record?
How?

Thanks for your help!
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20437846
and dnsstuff recognises that the dns servers that you have placed the .TXT files on are the authorative dns servers for your domain?
0
 

Author Comment

by:mihaisz
ID: 20461461
I've added the .txt record to both zoneedit.com (which holds my DNS) and to the internal DNS from my local network (Windows Server) but neither DNSStuff nor Microsoft's tool (http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/) won't see it as an SFP record. If I ask for my .TXT records on DNS Stuff, it will show it.

How can I publish the .txt record as an SPF record?
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses
Course of the Month9 days, 8 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question