[Postfixbuch-users] Mehrzeilige SPF-Eintraege

[Jan P. Kessler]

Andreas Schulze schrieb:

>http://www.ietf.org/internet-drafts/draft-schlitt-spf-classic-02.txt
>
>3.1.3. Multiple Strings in a Single DNS record
>3.1.4. Record Size
>   The published SPF record for a given domain name SHOULD remain small
>   enough that the results of a query for it will fit within 512 octets.
>   ...
>   Records that are too long to fit in a single UDP packet MAY be
>   silently ignored by SPF clients.
>  
>
Danke für die Info. Da ich die Anfrage zwischenzeitlich auch auf der 
SPF-Help Mailingsliste gestellt habe (sorry, die kannte ich zuvor 
nicht), habe ich zwischenzeitlich einen vielversprechenden Lösungsansatz 
gefunden:
--------------------------------------------------------------------------------

Or you can take another approach.  Pair.com (my domain host) covers multiple 
mail servers like this:

relay.pair.com.         7200    IN      TXT     "v=spf1 a" {note here, ?all is 
implcit in this case}

relay.pair.com.         7200    IN      A       209.68.5.16
relay.pair.com.         7200    IN      A       209.68.5.17
relay.pair.com.         7200    IN      A       209.68.5.9
relay.pair.com.         7200    IN      A       209.68.5.15

relay00.pair.com.       7200    IN      A       209.68.5.9
relay01.pair.com.       7200    IN      A       209.68.5.15
relay02.pair.com.       7200    IN      A       209.68.5.16
relay03.pair.com.       7200    IN      A       209.68.5.17

So, by having two A records (essentially a global one and a machine specific 
one) they manage to make their SPF record VERY simple.  Since I send through 
their mail server, all I have to put in my SPF record is a:relay.pair.com.

--------------------------------------------------------------------------------
[Scott Kitterman, SPF-Help Mailingsliste]

Gruß und vielen Dank für Deine Mühe,
  Jan