SPF records

We have two Spam filters, Barracuda and Spamhaus that are rejecting our company Emails to our customers. Mxtoolbox gave me SPF warnings and our ISP ,Godaddy said they didn't think our SPF record looked correct.

this is what we have in the SPF record now
v=spf1 include:mail.domainname.com ~all

What should it look like?

thanks.
raffie613Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Justin YeungSenior Systems EngineerCommented:
this is the article explain it.

http://www.openspf.org/SPF_Record_Syntax

and I use to use the generator

http://www.spfwizard.net/

include will pass to the SPF record of the domain after it, however if that is the same domain who does it.

it will fail since it pass to it.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
raffie613Author Commented:
So does this sound like a reason why these spam filters are blocking their company Emails?

I have managed Mx and DNS records before and never needed an SPF record created at the Hosted name server.
0
Justin YeungSenior Systems EngineerCommented:
You can do a instead of include
0
Simple Misconfiguration =Network Vulnerability

In this technical webinar, AlgoSec will present several examples of common misconfigurations; including a basic device change, business application connectivity changes, and data center migrations. Learn best practices to protect your business from attack.

Justin YeungSenior Systems EngineerCommented:
Yes some relay require SPF in order to process the mail
0
raffie613Author Commented:
ok at this part in the wizard
IP addresses in CIDR format that deliver or relay mail for this domain:

Do I enter the external IP address for the mail server or the internal network ip?
0
Justin YeungSenior Systems EngineerCommented:
External
0
Justin YeungSenior Systems EngineerCommented:
Or use mix that use name and or both
0
Justin YeungSenior Systems EngineerCommented:
Mx
0
raffie613Author Commented:
what do I put the /subnet mask on? 32?
0
Justin YeungSenior Systems EngineerCommented:
Yes if you are single ip
0
raffie613Author Commented:
"v=spf1 mx a ip4:1XX.2XX.68.162/29 ?all"

Do I put the quotes in as well or leave them off?
0
Justin YeungSenior Systems EngineerCommented:
v=spf1 mx a ip4:1xx.2xx.68.162/29 a:yourdomain.com -all

if you have multiple domain that send email off from this SMTP

v=spf1 mx a ip4:1xx.2xx.68.162/29 a:yourdomain.com;yourdomain1.com -all

just build it off from the generator, make your life much easier.

http://www.spfwizard.net/
0
raffie613Author Commented:
that was from the generator but it had those quotes around it. was just wondering if I include them
0
Justin YeungSenior Systems EngineerCommented:
yes
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
DNS

From novice to tech pro — start learning today.