Hellos, I have set up a mail server but mail to some domains is bouncing with the error "Unknown address error 550-'failed to meet SPF requirements'. I have set up spf records on the binf dns running on the mail server machine. I have not enabled spf lookups on the mail server. where could I have gone wrong? -- Best Regards, James Mutuku Ndeti Agile Systems Limited www.agile.co.ke mutuku.wordpress.com
check on MX record site http://www.mxtoolbox.com/ and see if you server is resolving to a name. If ip address, correct dns issue.
sorry, I meant to say reverse dns. If this is case, check with your ISP. Their records not pointing correctly. Reverse dns is hell. I think Mich or Wash are gurus on this. :-) On Tue, Jun 9, 2009 at 3:37 PM, aki <aki275@googlemail.com> wrote:
check on MX record site http://www.mxtoolbox.com/ and see if you server is resolving to a name. If ip address, correct dns issue.
On Tue, Jun 9, 2009 at 3:31 PM, James Mutuku <listmutuku@gmail.com> wrote:
Hellos,
I have set up a mail server but mail to some domains is bouncing with the error "Unknown address error 550-'failed to meet SPF requirements'. I have set up spf records on the binf dns running on the mail server machine. I have not enabled spf lookups on the mail server.
where could I have gone wrong?
Hi James, If this Bind instance is also the same DNS server that answers for your domain, then you have either setup the SPF records incorrectly or not setup reverse DNS records properly. If you gave the details of the domain (I believe there is no need for obfuscation) we could do a lookup and tell what could be wrong. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
Hellos, the reverse dns read x.x.x.x.accesskenya.com, though I know they should read x.x.x.x.mydomain.com. let me ask...who is supposed to setup by reverse dns. A. me(my dns is not public)(set it up as a split dns(I stand to be corrected)) B. My ISP.(who provide my public IP address) C. MY domain registrar(the host the dns records for my domain. the dns records are pinted ). On mxtoolbox.com, the mxlookup, diagnostics are fine. On the spf records the +ip4 passes but the -all fails
Hellos, the nslookup non authoritative answer resads "x.x.x.x.in-addr.arpa""name x.x.x.x.accesskenya.com" <http://x.x.x.x.accesskenya.com>, though I think they should read x.x.x.x.mydomain.com. let me ask...who is supposed to setup by reverse dns. A. me(my dns is not public)(set it up as a split dns(I stand to be corrected)) B. My ISP.(who provide my public IP address) C. MY domain registrar(the host the dns records for my domain. the dns records are pinted ). On mxtoolbox.com, the mxlookup, diagnostics are fine. On the spf records the +ip4 passes but the -all fails
On Tue, Jun 9, 2009 at 10:37 PM, James Mutuku <listmutuku@gmail.com> wrote:
Hellos, the reverse dns read x.x.x.x.accesskenya.com, though I know they should read x.x.x.x.mydomain.com. let me ask...who is supposed to setup by reverse dns.
This is wrong, unless your domain is a subdomain of Access Kenya. Your reverse DNS must read something like foobar.yourdomain.name. If Access Kenya are managing the IP space, then they are the ones to setup a proper rDNS record for you, instead of the generic x.x.x.x.accesskenya.com. They are also the ones to publish the correct SPF records for your domain (you tell them what you want included in the zone file for your domain) unless they have delegated the address space to your server, which I doubt. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
participants (3)
-
aki -
James Mutuku -
Odhiambo ワシントン