4

This is my SPF record:

v=spf1 a ip4:111.222.333.444 include:_spf.google.com ~all

I sent a test email to my Gmail address and below are the headers. I replaced real IP address with 111.222.333.444 and I replaced server hostname with myserver.example.com

My question is: why headers say that IP address 111.222.333.444 "is neither permitted nor denied"? This IP address is included in SPF record and should be "permitted". It's not a DNS caching problem.

Received: from myserver.example.com (static-ip-111-222-333-444.inaddr.example.com
[111.222.333.444])by mx.google.com with ESMTPS id h20si450242faa.105.2011.10.25.23.56.16
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 25 Oct 2011 23:56:17 -0700 (PDT)
Received-SPF: neutral (google.com: 111.222.333.444 is neither permitted 
nor denied by best guess record for domain of www-data@myserver.example.com) 
client-ip=111.222.333.444;
lars
  • 85
  • 1
  • 2
  • 5

4 Answers4

1

Without any real data, your record is impossible to validate. Try using some SPF testing tools to check for possible problems.

the-wabbit
  • 41,007
  • syneticon-dj, I already tried. The record is valid and this tool didn't find any problems. – lars Oct 26 '11 at 08:46
1

Is the record actually returned by queries to the mail domain's DNS with type TXT? Can you provide the output of an nslookup for that name, sanitizing private details?

Google's using "best guess", which means it didn't find the record in your DNS, or couldn't parse what it did find - this is what needs to be fixed. Your record's syntax is fine, but it's all for naught if the record isn't returned when an SPF client asks for it.

Shane Madden
  • 115,228
0

I am using Google Workspace which instructs us to add a TXT record to our DNS settings with record name (or host) of @. I found that if I added it to the root TXT with no record name my SPF finally started working.

If there is already a root record name, you can add your SPF string on a newline after the existing value.

McLovin
  • 101
0

Make sure that you enter your spf record in the DNS zone files,and also chaeck your syntax of spf record it might not be correct,try the link:-spfwizard.com.

achal tomar
  • 433
  • 3
  • 12