如何正确设置 DNS SPF 记录? [英] How to properly set up DNS SPF records?

问题描述

我每周都会向订阅者发送电子邮件，结果发现邮件经常进入用户的垃圾邮件文件夹.

I'm sending weekly emails to subscribers and it turns out that messages are frequently going to the spam folder for users.

我正在使用 Amazon SES 发送这些消息，并根据他们的说明添加了 SPF 记录:http://docs.amazonwebservices.com/ses/latest/DeveloperGuide/SPFSenderIDDKIM.html?r=3917

I'm utilizing Amazon SES to send these messages and have added an SPF record according to their instructions: http://docs.amazonwebservices.com/ses/latest/DeveloperGuide/SPFSenderIDDKIM.html?r=3917

在查询我的域的 SPF 记录时，我从 http://www.kitterman.com/spf 得到以下信息/validate.html:

In querying the SPF records for my domain I get the following back from http://www.kitterman.com/spf/validate.html:

SPF record lookup and validation for: mydomain.tld

SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:


SPF records should also be published in DNS as type SPF records.
Type SPF records found for the domain are:


Checking to see if there is a valid SPF record. 

Found v=spf1 record for mydomain.tld: 
v=spf1 include:amazonses.com ?all 

evaluating...
Results - record processed without error.

The result of the test (this should be the default result of your record) was, none . The explanation returned was,

对于我的 CloudFlare DNS 记录，我有:

For my CloudFlare DNS records I have:

SPF  mydomain.tld   v=spf1 include:amazonses.com ?all   with automatic TTL
TXT  mydomain.tld   spf2.0/pra include:amazonses.com ?all   with automatic TTL

电子邮件是从[e-mail]"和[e-mail]"发送的.

The emails are being sent from "[e-mail]" and "[e-mail]".

一些用户报告看到以下消息:错误地显示为退回邮件"响应的消息(系统生成的电子邮件，您在发送无法传递的消息后可能会自动收到，例如消息发送到无效的电子邮件地址)"

Some users have reported seeing the following message: "Messages that falsely appear to be a "bounced message" response (a system-generated email that you might automatically get after sending a message that can't be delivered such as a message sent to an invalid email address)"

使用我当前的发送解决方案，我无法向电子邮件添加 DKIM.

With my current sending solution I can't add a DKIM to the emails.

如何解决这个问题，以便为我们的用户改善任何类型的收据问题?

推荐答案

您的域没有有效的 TXT 记录(请注意，测试没有返回任何记录，请参阅下面的工作示例)，这是由于您定义的那些 TXT 记录周围缺少引号引起的，如解释例如在 记录支持的类型:

There are no valid TXT records for your domain (notice that the test doesn't return any, see below for a working example), which is caused by missing quotes around those TXT records you defined, as explained e.g. in Record Types Supported:

与大多数其他记录类型不同，对于 TXT 记录，数据字段是基本上是自由形式的，甚至可能包含空格.请注意:当输入包含空格的字符串，例如 SPF 记录，您必须用双引号将字符串括起来；否则，单个词将单独引用并将记录分成多个部分.

Unlike with most other record types, for TXT records the Data field is essentially free-form and may even include spaces. Please note: When entering a string that includes spaces, such as SPF records, you must enclose the string in double quotes; otherwise, individual words will be separately quoted and break up the record into multiple parts.

以下是我们目前成功用于 Amazon SES 的 TXT 记录根据 验证您的电子邮件地址 并且(确实很遗憾他们的文档没有不解决引用需求):

Here are the TXT records we currently use successfully for Amazon SES as per Authenticating Your Email Address and (it's indeed unfortunate that their documentation doesn't address the quoting needs):

"v=spf1 include:amazonses.com ~all"
"spf2.0/pra include:amazonses.com ~all"

因此，以下是我们域对您一直运行的测试的简要结果:

Accordingly, here is our domain's abbreviated result for the test you have been running:

SPF record lookup and validation for: [...]

SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:
spf2.0/pra include:amazonses.com ~all 
v=spf1 include:amazonses.com ~all 

[...]

Checking to see if there is a valid SPF record. 

Found v=spf1 record for services.marescom.net: 
v=spf1 include:amazonses.com ~all 

这篇关于如何正确设置 DNS SPF 记录?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！