troubleshooting Question

SPF Confusion

Avatar of coyotejeff
coyotejeff asked on
DNS
7 Comments1 Solution2212 ViewsLast Modified:
All, my office has 14 outgoing mail servers.  That makes my SPF string too long.  I have tried to generalize it with the following:

v=spf1 mx a:ccareynkf.com ~all

However I am still getting softfails.--Received-SPF: softfail (google.com: domain of transitioning jhumphrey@ccareynkf.com does not designate 209.76.96.12 as permitted sender) client-ip=209.76.96.12;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning jhumphrey@ccareynkf.com does not designate 209.76.96.12 as permitted sender) smtp.mail=jhumphrey@ccareynkf.com


In past, we used the following SPF, but because network solutions, who manages our DNS, didn't quite parse it coeectrly I think.

OLD SPF--still softfailed--
* (All Others)        7200        v=spf1 a:spfa.ccareynkf.com a:spfb.ccareynkf.com ~all
 
spfa.ccareynkf.com.       7200       v=spf1 ip4:173.164.197.66 ip4:68.65.78.67 ip4:66.7.244.215 ip4:69.170.43.171 ip4:173.164.197.50 ip4:69.239.193.227 ip4:69.170.47.245 ip4:206.170.188.211
 
spfb.ccareynkf.com.       7200       v=spf1 ip4:209.76.96.12 ip4:209.76.96.28 ip4:209.76.96.18 ip4:69.105.43.67 ip4:63.207.5.147 ip4:216.31.226.235 ip4:69.105.43.68 ip4:69.239.193.235 include=postini.com ~all


I am not a DNS expert and frankly the SPF stuff is above me.  All of our sending servers have both A and ptr records

Thanks for any help
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 7 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 7 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros