[Pdns-users] dig doesn't work after adding SPF record

Seth Mattinen sethm at rollernet.us
Fri Jul 31 17:32:14 UTC 2009


Frands Hansen wrote:
> 
> Exactly how did you add your SPF record?
> 
> This would be the correct way:
> 
> domain.tld TXT "v=spf1 blabla"
> 
> SPF records are not really "SPF" but "TXT" records with spf content.
> 


There is a type 99 SPF record. Publish both if you can. Examples you can
query yourself:

; <<>> DiG 9.5.1-P2 <<>> new.test SPF @ns1-auth.rollernet.us
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27001
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;new.test.			IN	SPF

;; ANSWER SECTION:
new.test.		86400	IN	SPF	"mx -all"

;; Query time: 12 msec
;; SERVER: 208.79.240.10#53(208.79.240.10)
;; WHEN: Fri Jul 31 10:28:31 2009
;; MSG SIZE  rcvd: 46


$ host -t SPF new.test ns1-auth.rollernet.us
Using domain server:
Name: ns1-auth.rollernet.us
Address: 208.79.240.10#53
Aliases:

new.test has SPF record "mx -all"


However, if your toolset doesn't understand type 99 records yet, you'll
see this:

$ host -t TYPE99 new.test ns1-auth.rollernet.us
Using domain server:
Name: ns1-auth.rollernet.us
Address: 208.79.240.10#53
Aliases:

new.test has TYPE99 record \# 8 076D78202D616C6C


~Seth



More information about the Pdns-users mailing list