[Pdns-users] Re: SPF

[Julian Mehnle]

marty wrote:
> The SPF rr is still not very well supported and few servers support it.
> Dig seems to bork the SPF type pretty badly.
> [...]
> PDNS seems to serve this record, but I get a mess when I try to access
> it with dig. Otherwise, other compatable testing tools said it was
> working and valid, and displayed the record which matched my TXT record
> exactly.

You need a sufficiently recent version of dig.  It supports SPF-type RRs
starting with 9.4:

  $ dig -v
  DiG 9.4.2
  $ dig -t SPF goodoldmarty.com +short
  "v=spf1 ip4:74.239.186.5 a:vs1.goodoldmarty.com ptr:goodoldmarty.com ~all"

Doesn't work with an older dig:

  $ dig -v
  DiG 9.3.2
  $ dig -t SPF goodoldmarty.com +short
  ;; Warning, ignoring invalid type SPF
  74.239.186.5
  $ dig -t TYPE99 goodoldmarty.com +short
  \# 73 48763D73706631206970343A37342E3233392E3138362E3520613A76 73312E676F6F646F6C646D617274792E636F6D207074723A676F6F64 6F6C646D617274792E636F6D207E616C6C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20080712/fe2868b8/attachment-0001.sig>