SPF record created by ISPConfig in bind9 should change
Summary
I started to get a lot of mails from noreply-dmarc-support@google.com and other servers including hostserv & Yahoo
Your domain then suffer reputation and then end up On SORBS SPAM and On UCEPROTECTL3
Steps to reproduce
- create DNS record for a domain
Correct behaviour
the spf record is OLD and need updating
Environment
bind9
Proposed fix
your Wizard create the spf as : TXT "v=spf1 mx a ~all"
those mentioned servers fail the SPF
to correct you need to add the ip6:{ipv4number} ip6:{ipv6number} amd more importent -all NOT ~all
e.g.
v=spf1 ip4:34.243.61.237 ip6:2a05:d018:e3:8c00:bb71:dea8:8b83:851e include:thirdpartydomain.com -all
than it will pass those tests properly!
References
https://www.dmarcanalyzer.com/spf/how-to-create-an-spf-txt-record/ Actually all the spf advice said the same!
Edited by Johannes Bester