SPF记录问题

Question

有时，当我的服务器以通讯组列表的形式向google应用程序管理的“内部”地址发送电子邮件时，我会收到这些错误

Received: from ovhprod.diveboard.com ([2607:5300:60:1d85::1])
    by mx.google.com with ESMTPS id e4si6519596qas.128.2013.08.14.00.28.57
    for <logs@diveboard.com>
    (version=TLSv1.2 cipher=RC4-SHA bits=128/128);
    Wed, 14 Aug 2013 00:28:57 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning plugin@diveboard.com does not designate 2607:5300:60:1d85::1 as permitted sender) client-ip=2607:5300:60:1d85::1;
Authentication-Results: mx.google.com;
   spf=softfail (google.com: domain of transitioning plugin@diveboard.com does not designate 2607:5300:60:1d85::1 as permitted sender) 

我确实添加了SPF记录，但看起来我做错了--有什么提示吗!？

@ 10800 IN SPF "v=spf1 a mx include:smtp1.uservoice.com ~all"
@ 10800 IN SPF "v=spf1 include:_spf.google.com include:sendgrid.net ~all"
@ 10800 IN SPF "v=spf1 ip4:192.95.11.34/30 ptr ?all"
@ 10800 IN SPF "v=spf1 ip4:198.27.68.133/32 ip6:2607:5300:60:1d85::1/64 ptr ?all"
@ 10800 IN TXT "v=spf1 a mx include:smtp1.uservoice.com ~all"
@ 10800 IN TXT "v=spf1 include:_spf.google.com include:sendgrid.net ~all"
@ 10800 IN TXT "v=spf1 ip4:192.95.11.34/30 ptr ?all"
@ 10800 IN TXT "v=spf1 ip4:198.27.68.133/32 ip6:2607:5300:60:1d85::1/64 ptr ?all"

Answer 1

每台主机只能有一个1 SPF字符串。SPF记录可以指定为TXT或SPF记录。最佳做法是拥有1条TXT和1条SPF记录。

请在此处检查您的域名：http://spf.myisp.ch

我建议你在维基百科上阅读整个SPF页面：http://en.wikipedia.org/wiki/Sender_Policy_Framework#FAIL_and_forwarding

Answer 2

您的SPF记录写得不好。您只能有一个SPF记录。

您可以将它们全部替换为

"v=spf1 a mx ptr ip4:192.95.11.34/30 ip4:198.27.68.133/32 ip6:2607:5300:60:1d85::1/64 include:smtp1.uservoice.com  include:_spf.google.com include:sendgrid.net ~all"

但是，最后的SPF规范建议避免PTR机制。