[Pdns-users] dig doesn't work after adding SPF record

[Jeroen Wunnink]

SPF record isn't really a SPF record, it's a TXT record with the SPF 
content in it :-)

shion wrote:
> Hi folks,
>
> I have added a domain in my nameserver with the following configuration:
> SOA	ns.inwx.de foo at bar.de 2009073103
> NS	ns.inwx.de
> NS	ns2.inwx.de
> NS	ns3.inwx.de
>
> After this I have checked the entries with dig, that everything is correct.
>
> -----------------------------------------------------------------
> $ dig @ns.inwx.de spf-record-test.de ANY
>
> ; <<>> DiG 9.5.1-P2 <<>> @ns.inwx.de spf-record-test.de ANY
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42148
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 3
> ;; WARNING: recursion requested but not available
>
> ;; QUESTION SECTION:
> ;spf-record-test.de.            IN      ANY
>
> ;; ANSWER SECTION:
> spf-record-test.de.     3600    IN      NS      ns.inwx.de.
> spf-record-test.de.     3600    IN      NS      ns2.inwx.de.
> spf-record-test.de.     3600    IN      SOA     ns.inwx.de. foo at bar.de.
> 2009073103 10800 3600 604800 3600
> spf-record-test.de.     3600    IN      NS      ns3.inwx.de.
>
> ;; ADDITIONAL SECTION:
> ns3.inwx.de.            3600    IN      A       217.20.112.194
> ns2.inwx.de.            3600    IN      A       213.239.206.103
> ns.inwx.de.             3600    IN      A       217.70.142.66
>
> ;; Query time: 26 msec
> ;; SERVER: 217.70.142.66#53(217.70.142.66)
> ;; WHEN: Fri Jul 31 16:09:54 2009
> ;; MSG SIZE  rcvd: 181
> -----------------------------------------------------------------
>
> Next step..
> Now I have added a SPF record.
> SPF	v=spf1 -all
>
> And checked the entries with dig again.
>
> -----------------------------------------------------------------
> $ dig @ns.inwx.de spf-record-test.de ANY
>
> ; <<>> DiG 9.5.1-P2 <<>> @ns.inwx.de spf-record-test.de ANY
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 54903
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; WARNING: recursion requested but not available
>
> ;; QUESTION SECTION:
> ;spf-record-test.de.            IN      ANY
>
> ;; Query time: 27 msec
> ;; SERVER: 217.70.142.66#53(217.70.142.66)
> ;; WHEN: Fri Jul 31 16:12:29 2009
> ;; MSG SIZE  rcvd: 36
> -----------------------------------------------------------------
>
> After adding a SPF record, it isn't possible to dig the domain.
> I don't get any records of the domain. After removing the SPF record it is
> possible again.
> It seems to be a problem with pdns and SPF records.
>
> Furthermore it seems that some mailservers can't deliver e-mails because the
> nameserver lookup deferred, if the SPF record is set.
>
> Does somebody know, what I can do to solve the problem?
> Or maybe it is a bug?!
>
> The used pdns-server version is 2.9.22-1.
>
> $ dig -v
> DiG 9.5.1-P2
>
> Thanks,
>
> shion
>   

-- 

Met vriendelijke groet,

Jeroen Wunnink,
EasyHosting B.V. Systeembeheerder
systeembeheer at easyhosting.nl

telefoon:+31 (035) 6285455              Postbus 48
fax: +31 (035) 6838242                  3755 ZG Eemnes

http://www.easyhosting.nl
http://www.easycolocate.nl