如何正确设置DNS SPF记录？ [英] How to properly set up DNS SPF records?

问题描述

我正在向订阅者发送每周电子邮件，事实证明，消息通常用于用户的垃圾邮件文件夹。

I'm sending weekly emails to subscribers and it turns out that messages are frequently going to the spam folder for users.

我正在使用Amazon SES发送这些消息并根据他们的指示添加了一个SPF记录： http：//docs.amazonwebservices .com / ses / latest / DeveloperGuide / SPFSenderIDDKIM.html？r = 3917

I'm utilizing Amazon SES to send these messages and have added an SPF record according to their instructions: http://docs.amazonwebservices.com/ses/latest/DeveloperGuide/SPFSenderIDDKIM.html?r=3917

在查询我的域的SPF记录时，我从< a href =http://www.kitterman.com/spf/validate.html> http://www.kitterman.com/spf/validate.html ：

In querying the SPF records for my domain I get the following back from http://www.kitterman.com/spf/validate.html:

SPF record lookup and validation for: mydomain.tld

SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:


SPF records should also be published in DNS as type SPF records.
Type SPF records found for the domain are:


Checking to see if there is a valid SPF record. 

Found v=spf1 record for mydomain.tld: 
v=spf1 include:amazonses.com ?all 

evaluating...
Results - record processed without error.

The result of the test (this should be the default result of your record) was, none . The explanation returned was,

对于我的CloudFlare DNS记录，我有：

For my CloudFlare DNS records I have:

SPF  mydomain.tld   v=spf1 include:amazonses.com ?all   with automatic TTL
TXT  mydomain.tld   spf2.0/pra include:amazonses.com ?all   with automatic TTL

电子邮件正在从[e-mail]发送和[e-mail]。

The emails are being sent from "[e-mail]" and "[e-mail]".

有些用户报告看到以下消息：错误地显示为退回消息响应的消息（系统 - 发送邮件后，您可能会发送无法发送的邮件，例如邮件发送到无效的电子邮件地址时可能会自动获取邮件）

Some users have reported seeing the following message: "Messages that falsely appear to be a "bounced message" response (a system-generated email that you might automatically get after sending a message that can't be delivered such as a message sent to an invalid email address)"

使用我当前的发送解决方案不能向电子邮件添加DKIM。

With my current sending solution I can't add a DKIM to the emails.

如何解决这个问题，以改善用户的任何类型的收据问题？

推荐答案

没有有效的 TXT 您的域的记录（注意测试不返回任何，见下面的工作示例），这是由您定义的那些 TXT 记录上的引号引起的例如说在记录支持的类型：

There are no valid TXT records for your domain (notice that the test doesn't return any, see below for a working example), which is caused by missing quotes around those TXT records you defined, as explained e.g. in Record Types Supported:

与大多数其他记录类型不同，对于TXT记录，Data字段为
，形式，甚至可以包括空格。请注意：当
输入包含空格的字符串（如SPF记录）时，必须使用
将字符串括在双引号中;否则，个别单词将
单独引用，并将记录分解成多个部分。

Unlike with most other record types, for TXT records the Data field is essentially free-form and may even include spaces. Please note: When entering a string that includes spaces, such as SPF records, you must enclose the string in double quotes; otherwise, individual words will be separately quoted and break up the record into multiple parts.

这里是$ $ c> TXT 我们目前正在使用 Amazon SES 的记录， a href =http://docs.amazonwebservices.com/ses/latest/DeveloperGuide/SPFSenderIDDKIM.html =noreferrer>验证您的电子邮件地址，（确实不幸的是，他们的文档没有解决引用需要）：

Here are the TXT records we currently use successfully for Amazon SES as per Authenticating Your Email Address and (it's indeed unfortunate that their documentation doesn't address the quoting needs):

"v=spf1 include:amazonses.com ~all"
"spf2.0/pra include:amazonses.com ~all"

因此，这里是我们域名的缩写结果，用于测试已经运行：

Accordingly, here is our domain's abbreviated result for the test you have been running:

SPF record lookup and validation for: [...]

SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:
spf2.0/pra include:amazonses.com ~all 
v=spf1 include:amazonses.com ~all 

[...]

Checking to see if there is a valid SPF record. 

Found v=spf1 record for services.marescom.net: 
v=spf1 include:amazonses.com ~all 

这篇关于如何正确设置DNS SPF记录？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！