<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix"><br>
<a class="moz-txt-link-freetext" href="http://www.kitterman.com/spf/validate.html">http://www.kitterman.com/spf/validate.html</a><br>
<br>
- Kevin<br>
<br>
On 7/8/2014 12:43 PM, Alex wrote:<br>
</div>
<blockquote
cite="mid:CAB1R3siHZ=fhZU4u0Nsq+Ze4ZvasJhOmuOqLc95nT6LjYyVNaA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,<br>
<br>
I have a mail server that manages mail for about ten domains,
using bind-9.9.4-12.P2 on fedora20. I'd like to make sure my SPF
record in my SOA is set up correctly, and hoped someone could
help. Currently I have the following:<br>
<br>
$TTL 1d<br>
<br>
@ IN SOA <a moz-do-not-send="true"
href="http://ns.example.com">ns.example.com</a>. <a
moz-do-not-send="true" href="http://admin.ns.example.com">admin.ns.example.com</a>.
(<br>
2011041707 ;serial (yyyymmddxx)<br>
3h ;refresh every 3 hours<br>
1h ;retry every 1 hr<br>
7d ;expire in 7 days<br>
1d ) ;minimum ttl 1 day<br>
<br>
IN NS <a moz-do-not-send="true"
href="http://ns.example.com">ns.example.com</a>.<br>
IN NS <a moz-do-not-send="true"
href="http://ns1.example.com">ns1.example.com</a>.<br>
IN NS <a moz-do-not-send="true"
href="http://ns2.example.com">ns2.example.com</a>.<br>
<br>
A 192.168.1.10<br>
<br>
IN MX 10 <a moz-do-not-send="true"
href="http://smtp.example.com">smtp.example.com</a>.<br>
<br>
IN TXT "v=spf1 mx a ip4:<a
moz-do-not-send="true" href="http://192.168.1.11/32">192.168.1.11/32</a>
ip4:<a moz-do-not-send="true" href="http://192.168.2.11/32">192.168.2.11/32</a>
a:<a moz-do-not-send="true" href="http://smtp.example.com">smtp.example.com</a>
a:<a moz-do-not-send="true" href="http://smtp1.example.com">smtp1.example.com</a>
-all"<br>
<br>
ns IN TXT "v=spf1 a -all"<br>
ns1 IN TXT "v=spf1 a -all"<br>
ns2 IN TXT "v=spf1 a -all"<br>
smtp IN TXT "v=spf1 a -all"<br>
smtp1 IN TXT "v=spf1 a -all"<br>
<br>
I believe there is a new SPF TXT entry in addition to the one
I've created above that's now being used? The references I read
were unclear.<br>
<br>
Does this look correct? I'd have to add this SOA to every domain
the mail server manages, correct? The smtp and smtp1 servers are
the only two servers that should be responsible for this domain.<br>
<br>
Any ideas greatly appreciated.<br>
Thanks,<br>
Alex<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
<br>
</body>
</html>