[Techtalk] spf records stuff

Ben Knowles adric at adric.net
Sat Sep 22 15:15:37 UTC 2007


Hmm, okay that snip looks fine. If you want to generally troubleshoot
your DNS, start with a WHOIS query to see what the nameservers are, then
query them directly and compare this what you get from other
nameservers. I often ask ns2.mindspring.com (, an old
host from a closed local ISP. There are several websites like
dnstools.com that will help you query dns and whois or you can just do
it from the command line:

lorelei-lee:~/Work adric$ whois shadlen.org | grep -i ns

lorelei-lee:~/Work adric$ for isis in NS1.MYDOMAIN.COM NS2.MYDOMAIN.COM
DNS.SHADLEN.ORG; do dig @"$isis" shadlen.org txt | grep TXT; done
;shadlen.org.                   IN      TXT
shadlen.org.            86400   IN      TXT     "'v=spf1
ip4: ip4: ip4:
ip4: ip4: ip4: ip4:1"
" a ~all'"
;shadlen.org.                   IN      TXT
shadlen.org.            86400   IN      TXT     "'v=spf1
ip4: ip4: ip4:
ip4: ip4: ip4: ip4:1"
" a ~all'"

Your dns.shadlen.org did not respond, but the first two have the same
txt you quoted before.

Hmm.. not sure.

Maria McKinley wrote:
> Ben Knowles wrote:
>> Hi
>> When I dig your mail domain for txt records, I get this:
>> shadlen.org.            86400   IN      TXT     "'v=spf1
>> ip4: ip4: ip4:
>> ip4: ip4: ip4: ip4:1"
>> " a ~all'"
>> Is your record broken into multiple strings? It looks like it breaks at
>> the 140.142 addy, and maybe that's the trouble? Other than that the SPF
>> syntax looks okay to me..
>> Perhaps you could post a snippet of your Bind (et alia) zone? If it is
>> bind then you might try named-checkzone, as it can catch syntax errors.
>> hth,
>> Ben
> Not sure if this is what you mean by a snippet of my Bind zone, but here 
> is my syntax from the bind file:
> "v=spf1 ip4: ip4:
> ip4: ip4: ip4: 
> ip4: ip4: a ~all"
> When I copy it into the SPF record checker it comes up valid, and I 
> think if I were having a syntax problem, I would get a different error 
> message. It is more like, there is more than one way to ask my dns 
> server (or to find out where my dns server is?) and it just isn't 
> reading my txt record at all at certain times or for certain purposes.
> ~maria
> _______________________________________________
> Techtalk mailing list
> Techtalk at linuxchix.org
> http://mailman.linuxchix.org/mailman/listinfo/techtalk

More information about the Techtalk mailing list