Thank you for being part of spf-help

multiple domains

I have several domains hosted on a single server. That machine's 
hostname is domain1.com, same as that used for Postfix. The outgoing 
server used for all email accounts is mail.domain1.com.

I'm having a lot of trouble understanding how to create SPF records for 
all of the domains on this server. Specifically, the instructions for 
the tool at openspf.org are making my head spin. I think that this is 
what I need:

domain1.com:
v=spf1 a:mail.domain1.com -all

domain2.com:
v=spf1 a:domain2.com include:mail.domain1.com -all

etc.

Is this correct? I'm unsure whether I need an SPF record for each 
domain, or a single one for domain1.com that includes the others.

Help with SPF for multiple domains please

I am trying to help a client of my set up an SPF record for his domain. He has 
the need to authenticate mail from three locations

1. his domain whistlerreservations.com which is set up with google apps mail

2. Via a third party booking engine that sends mail from the domain rezserve.com

3. Via campaign monitor (cmail1.com) which is an email distribution system.

I have set up the following

v=spf1 a mx include:rezserve.com include:cmail1.com include:_spf.google.com ~all

but am getting the following error when validating with the 
http://www.kitterman.com/spf/validate.html SPF Records Testing Tools Results - 

PermError SPF Permanent Error: No valid SPF record for included domain: 
rezserve.com: include:rezserve.com 

Does Rezserve.com have to do something on there end? If so what do they need to 
do? Also do I need to specify a mx in my spf if I already have 
include:_spf.google.com in there? 

I hacked this together from various sources

1) google apps help - google.com/support/a/bin/answer.py?answer=178723]SPF 
records - Google Apps Help[/url]

which says to set the following v=spf1 include:_spf.google.com ~all

2) Campaingmonitor help -help.campaignmonitor.com/topic.aspx?t=88

Which says to set - v=spf1 mx include:cmail1.com ~all

Below is the mail header from one of the messages sent from resserve.com

Delivered-To: jac <at> whistlerwebandprint.com
Received: by 10.231.30.196 with SMTP id v4cs105047ibc;
Mon, 28 Feb 2011 13:54:38 -0800 (PST)
Received: by 10.227.156.207 with SMTP id y15mr5389341wbw.38.1298930077969;
Mon, 28 Feb 2011 13:54:37 -0800 (PST)
Return-Path: <reservations <at> whistlerreservations.com>
Received: from rezserve.com ([204.14.93.102])
by mx.google.com with ESMTPS id p44si7256090wej.197.2011.02.28.13.54.36
(version=TLSv1/SSLv3 cipher=OTHER);
Mon, 28 Feb 2011 13:54:36 -0800 (PST)
Received-SPF: neutral (google.com: 204.14.93.102 is neither permitted nor denied 
by best guess record for domain of reservations <at> whistlerreservations.com) 
client-ip=204.14.93.102;
Authentication-Results: mx.google.com; spf=neutral (google.com: 204.14.93.102 is 
neither permitted nor denied by best guess record for domain of 
reservations <at> whistlerreservations.com) 
smtp.mail=reservations <at> whistlerreservations.com
Received: from rezserve.com (localhost.localdomain [127.0.0.1])
by rezserve.com (8.13.1/8.13.1) with ESMTP id p1SLsT8X032018
for <jac <at> whistlerwebandprint.com>; Mon, 28 Feb 2011 16:54:29 -0500
Received: (from apache <at> localhost)
by rezserve.com (8.13.1/8.13.1/Submit) id p1SLsTll032016;
Mon, 28 Feb 2011 16:54:29 -0500
Date: Mon, 28 Feb 2011 16:54:29 -0500

Re: do you see something i don't

El mi�, 02-03-2011 a las 14:59 -0500, Andrew Culver escribi�:
> The DNS records you gave below aren't the same as what I see.
> 
> Trying "listas.fcal.uner.edu.ar"
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28806
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 3, ADDITIONAL: 1
> 
> ;; QUESTION SECTION:
> ;listas.fcal.uner.edu.ar.	IN	ANY
> 
> ;; ANSWER SECTION:
> listas.fcal.uner.edu.ar. 4350	IN	A	190.228.25.197
> listas.fcal.uner.edu.ar. 4340	IN	MX	10 listas.fcal.uner.edu.ar.
> listas.fcal.uner.edu.ar. 4334	IN	TXT	"v=spf1 mx -all"
> 
> ;; AUTHORITY SECTION:
> fcal.uner.edu.ar.	4341	IN	NS	ns1.uner.edu.ar.
> fcal.uner.edu.ar.	4341	IN	NS	ns1.fcal.uner.edu.ar.
> fcal.uner.edu.ar.	4341	IN	NS	ns2.fcal.uner.edu.ar.
> 
> ;; ADDITIONAL SECTION:
> ns2.fcal.uner.edu.ar.	4341	IN	A	170.210.29.130
> 
> Received 170 bytes from 129.100.2.12#53 in 1 ms
> 
> 
> Andrew
> 

that's because you are not inside the RIU network, that is our
commercial link and the visible address to commercial Internet

it isn't an error, it's the supposed answer

regards.

--

-- 
Carlos R. Pasqualini <pasqualinic <at> fcal.uner.edu.ar>
Adm. de Redes - Facultad de Ciencias de la Alimentaci�n - UNER

Re: Where is the difference?

On Fri, 25 Feb 2011 19:04:55 +0100, Marc Oliv� <marc <at> elnucli.com> wrote:

> The (HARD)FAIL) message header:

http://old.openspf.org/wizard.html?mydomain=aerobicyfitness.espainucli.com&submit=Go!

aerobicyfitness.espainucli.com's IP address is 212.36.77.75
(xen-ad0059.srv.cat). 
Does that server send mail from aerobicyfitness.espainucli.com?

add ip4:212.36.77.75 to the above spf record

Contact information to the webmaster for openspf.org

Hi everyone,

I have tried to contact the webmaster for the web page "openspf.org", 
because the web page has a error, but the mail address I write to (
spf-webmasters <at> v2.listbox.com
) does not work.

Have any person a directly mail address to the webmaster?

I can not write via the form on the openspf.org-web page, because the form 
also have a error.

Thanks for the answer.

Regards,
Anders 

my email

Would the following SPF be the best?

Using subdomain for mailout

best practices for txt records with more than 255 characters

v=spf1 mx ~all SoftFail