How to resolve SPF configuration to allow Google sending mails

domain-name-systemgmailmx-recordspf

we are configuring DNS for a GMail service, the MX records are configured as to Google says, however, in the DNS check, there is a warning:

SPF must allow Google to send mail on behalf of the domain

My questions:

Why is the SPF record for GMail a problem?
How to resolve that issue?

Many thanks for your help! Google Mail error

Best Answer

You need to add a SPF DNS record in your DNS server (SPF = Sender Policy Framework). The value of this record is provided in your screenshot already.

It is highly recommended to add not only the SPF record but also a TXT record with the same value. The SPF record will tell receiving Emailservers that the Gmail servers are permitted to send Emails using your domain as sender (details: http://en.wikipedia.org/wiki/Sender_Policy_Framework).

If you have a domain provider who is giving you access to his DNS servers, then there might be a special option to set it up easily for you.

Related Solutions

DNS zone file SPF configuration to support sending mail from multiple servers and gmail

Checkout the wizard on openspf.org to help you write the correct SPF settings: http://old.openspf.org/wizard.html?mydomain=x.com

Aside from that, your SPF settings look fine to me for this use.

You are correct to include a SPF record for each of the MX hosts too. These are used in case email is bounced with a null address (in the SMTP protocol), then SPF falls back on using the sending server's address.

If you're certain that no other servers may send mail for your domain, then you should use -all. Of course, this means that any email sent from other servers may be rejected, if they're turns out to be some!

Does Google/Gmail & Yahoo/YMail cache DNS information related to SPF

If I'm following your setup correctly you have your SPF record set on the root, but you are sending email from the sub-domain

if the 'envelope from' of the email is root@mail.myapp.com then you need to change the "@" txt record to "mail". if you were sending mail from root@myapp.com then your setup would be correct.

So something like this

;;in the myapp.com zone
@    IN   TXT  "v=spf1 ip4:69.XXX.XXX.XXX ~all" ;covers root@myapp.com
mail IN   A    69.xxx.xxx.xxx
mail IN   TXT  "v=spf1 ip4:69.XXX.XXX.XXX ~all" ;covers root@mail.myapp.com

Best Answer

Related Solutions

DNS zone file SPF configuration to support sending mail from multiple servers and gmail

Does Google/Gmail & Yahoo/YMail cache DNS information related to SPF

Related Topic