如何合并这3个SPF txt记录 [英] How can I merge these 3 SPF txt records

问题描述

我有3条SPF记录:

 "v = spf1 include:spf.protection.outlook.com -all""v = spf1 a ptr include:authsmtp.com?all""v = spf1 a mx包括:spf.mtasv.net〜all" 

如何将它们全部合并为一个txt记录?

解决方案

合并的记录将如下所示:

v = spf1一个mx ptr包含:spf.protection.outlook.com包含:authsmtp.com包含:spf.mtasv.net-全部

您必须决定要使用哪种 all 机制，因为SPF记录中只能包含一种.我将 -all 包括在内，因为它是最严格的限制，应该使用它，除非存在从SPF记录中未列出的服务器发送有效邮件的风险.

您还应该考虑删除 ptr 机制，因为不鼓励使用此机制，因为它会给接收邮件服务器带来负担.

合并的记录还可能会达到10个DNS查找的SPF的DNS查找限制.由于当前的第一个包含两个将分别导致2个附加的DNS查找，因此DNS查找的总数(如果 ptr 仍然存在)将为10，这是限制.因此，如果以后包含的记录之一添加了另外的 include ，则对SPF记录的评估可能会导致错误".

I have 3 SPF records:

"v=spf1 include:spf.protection.outlook.com -all"
"v=spf1 a ptr include:authsmtp.com ?all"
"v=spf1 a mx include:spf.mtasv.net ~all"

How can I merge them all together into one txt record?

解决方案

The merged record would look like this:

v=spf1 a mx ptr include:spf.protection.outlook.com include:authsmtp.com include:spf.mtasv.net -all

You'll have to decide which of the all mechanisms you want to use, since you can only have one in a SPF record. I have included the -all since it's the most restrictive, and is the one that should be used, unless there is a risk of valid mails being sent from a server not listed in the SPF record.

You should also consider removing the ptr mechanism, since it's discouraged to use this mechanism, since it can put a load on the receiving mail-server.

The merged record is also in risk of hitting the DNS lookup limit for SPF of 10 DNS lookups. Since the two first includes currently will result in 2 additional DNS lookups each, the total number of DNS lookups (if the ptr is still present) will be 10, which is the limit. So if one of the included records later add an additional include the evaluation of your SPF record may result in a "permerror".

这篇关于如何合并这3个SPF txt记录的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！