SPF Records OK like this?

lucaat

Hello,

I have the following SPF records:

mydomain.com. IN TXT “v=spf1 a mx a:mydomain.com ip4:192.168.0.5 ip4:XXX.2XX.218.XX ip6:2a00:XXX:1000:1300:6e4b:XXX:XXX:e7b1 -all”

hostname.mydomain.com. IN TXT “v=spf1 a -all”

The first records was created by a control panel I like to use. The second TXT record was created manually by myself becuase mail tester wants a HELO message to match.

Is it ok to have the records like this? Or should the second entry be extended to include the IP’s?

D4niel

Usually you don’t have to include any IPs if the same IPs are already in the mx record: https://docs.mailcow.email/prerequisite/prerequisite-dns/#dkim-spf-and-dmarc

Also you don’t need the second record unless you send mails as user@hostname.mydomain.com.

lucaat

yes thats what the panel does it sends mail from webmin@hostname.mydomain.com.

It seems to be fine. header says score is 0.02.

D4niel

Sounds a bit like that panel has wrong mail settings. It might work, but it is probably not well configured with mailcow. Receiving mails on that domain probably won’t work as well.

lucaat

You are right, actually DKIM fails, with that mail. I have set the panel to use postmaster@mydomain.com and it seems happy now.

I will keep the other record just to make mail-tester HELO test happy.

thank you