使用port25.com的漂亮的小工具测试我的SPF记录时发送电子邮件给
check-auth@verifier.port25.com我得到以下失败结果：
check-auth@verifier.port25.com我得到以下失败结果：
==========================================================
Details:
==========================================================
HELO hostname: avantgardeweb.co.uk
Source IP: 2002:2e20:e862::2e20:e862
mail-from: user@greenshieldsarchitecture.co.uk
----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: fail (not permitted)
ID(s) verified: smtp.mailfrom=user@greenshieldsarchitecture.co.uk
DNS record(s):
greenshieldsarchitecture.co.uk. SPF (no records)
greenshieldsarchitecture.co.uk. 14400 IN TXT "v=spf1 mx a -all"
greenshieldsarchitecture.co.uk. 14400 IN MX 10 mail.greenshieldsarchitecture.co.uk.
mail.greenshieldsarchitecture.co.uk. AAAA (no records)
greenshieldsarchitecture.co.uk. AAAA (no records)
但是,当我实际向gmail帐户发送电子邮件时,它会通过：
Received-SPF: pass (google.com: domain of user@greenshieldsarchitecture.co.uk designates 46.32.232.98 as permitted sender) client-ip=46.32.232.98; Authentication-Results: mx.google.com; spf=pass (google.com: domain of user@greenshieldsarchitecture.co.uk designates 46.32.232.98 as permitted sender)
谁能在这里解决一些问题？
解决方法
您的port25.com测试邮件似乎通过IPv6连接(或IPv6源)到达,因此SPF客户端查找DNS AAAA RR,而不是通常与IPv4源一起使用的A RR.这就是SPF的工作方式(
see RFC7208 Section 5.5),但由于你的域缺少AAAA记录,“mx”和“a”机制都没有匹配,SPF评估也没有“-all”.在gmail的情况下,连接是从IPv4地址进行的,因此匹配“mx”或“a”.
如果您使用的是IPv6,只需为mail.greenshieldsarchitecture.co.uk设置AAAA记录即可解决问题.
