more than 10 DNS searches for SPFWorkarounds for maximum DNS-Interactive terms limit exceeded in SPF record?PermError SPF Too Many Lookups and ReductionMedia Temple, SPF, and Changing IP AddressesOffice365 SPF record has too many lookupsConfiguring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP serversDns filezone setup with mx and spfSPF settings for subdomains using common mail serverSetting up an SPF record for a shared hosting service with lots of email gatewaysHow do I configure mailserver SPF records under CloudFlare?How to recover domain name from previous bad SPF record?SPF fail vs. soft-fail pros and consSPF record permerror showed in an email header, but no reason for it
How do LIGO and VIRGO know that a gravitational wave has its origin in a neutron star or a black hole?
What does 'made on' mean here?
Has the Hulk always been able to talk?
Introducing Gladys, an intrepid globetrotter
How to write a 12-bar blues melody
What to use instead of cling film to wrap pastry
Emotional immaturity of comic-book version of superhero Shazam
Can my 2 children 10 and 12 Travel to the USA on expired American Passports? They are US citizens
Are pressure-treated posts that have been submerged for a few days ruined?
How can I get people to remember my character's gender?
Can a Tiefling have more than two horns?
How to increase the size of the cursor in Lubuntu 19.04?
Can you Ready a Bard spell to release it after using Battle Magic?
Where is the documentation for this ex command?
Out of scope work duties and resignation
Understanding trademark infringements in a world where many dictionary words are trademarks?
Does it make sense for a function to return an rvalue reference?
Refinish or replace an old staircase
Why wasn't the Night King naked in S08E03?
Are Finitely generated modules over a ring also finitely generated over a subring containing the identity?
How do inspiraling black holes get closer?
PWM 1Hz on solid state relay
How can I roleplay a follower-type character when I as a player have a leader-type personality?
3D Volume in TIKZ
more than 10 DNS searches for SPF
Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record?PermError SPF Too Many Lookups and ReductionMedia Temple, SPF, and Changing IP AddressesOffice365 SPF record has too many lookupsConfiguring SPF, DKIM, Reverse DNS for VPS sending email through Google Apps SMTP serversDns filezone setup with mx and spfSPF settings for subdomains using common mail serverSetting up an SPF record for a shared hosting service with lots of email gatewaysHow do I configure mailserver SPF records under CloudFlare?How to recover domain name from previous bad SPF record?SPF fail vs. soft-fail pros and consSPF record permerror showed in an email header, but no reason for it
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
SPF allows up to 10 DNS calls. We use multiple email providers and overall get 13 DNS calls for SPF.
The solutions I've found so far:
Manually collecting and "inlining" the IP addresses to reduce DNS lookups. Unfortunately this makes the entry static and will not be up-to-date when providers update their SPF records.
Creating subdomains for one/few of the SPF providers - won't work for business reasons.
Using an "SPF proxy" - I found only spfproxy.org (now defunct?) and I'm afraid to use them because I can't find who is behind it and they don't answer emails.
What options do I have? Ideally a solution like spfproxy which I can trust would work for me but I could not find any.
domain-name-system spf
edited Mar 20 '17 at 1:03
Simon East
7571916
asked Sep 1 '16 at 14:53
NiroNiro
69721332
add a comment |
SPF allows up to 10 DNS calls. We use multiple email providers and overall get 13 DNS calls for SPF.
The solutions I've found so far:
Manually collecting and "inlining" the IP addresses to reduce DNS lookups. Unfortunately this makes the entry static and will not be up-to-date when providers update their SPF records.
Creating subdomains for one/few of the SPF providers - won't work for business reasons.
Using an "SPF proxy" - I found only spfproxy.org (now defunct?) and I'm afraid to use them because I can't find who is behind it and they don't answer emails.
What options do I have? Ideally a solution like spfproxy which I can trust would work for me but I could not find any.
domain-name-system spf
edited Mar 20 '17 at 1:03
Simon East
7571916
asked Sep 1 '16 at 14:53
NiroNiro
69721332
What spfproxy does doesn't sound very complicated, have you considered implementing the same on your own DNS server?
– kasperd
Sep 1 '16 at 21:18
I use scalr DNS servers. I dont operate them.
– Niro
Sep 2 '16 at 13:24
See also Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record? and PermError SPF Too Many Lookups and Reduction
– Simon East
Mar 19 '17 at 23:08
add a comment |
SPF allows up to 10 DNS calls. We use multiple email providers and overall get 13 DNS calls for SPF.
The solutions I've found so far:
Manually collecting and "inlining" the IP addresses to reduce DNS lookups. Unfortunately this makes the entry static and will not be up-to-date when providers update their SPF records.
Creating subdomains for one/few of the SPF providers - won't work for business reasons.
Using an "SPF proxy" - I found only spfproxy.org (now defunct?) and I'm afraid to use them because I can't find who is behind it and they don't answer emails.
What options do I have? Ideally a solution like spfproxy which I can trust would work for me but I could not find any.
domain-name-system spf
edited Mar 20 '17 at 1:03
Simon East
7571916
asked Sep 1 '16 at 14:53
NiroNiro
69721332
SPF allows up to 10 DNS calls. We use multiple email providers and overall get 13 DNS calls for SPF.
The solutions I've found so far:
Manually collecting and "inlining" the IP addresses to reduce DNS lookups. Unfortunately this makes the entry static and will not be up-to-date when providers update their SPF records.
Creating subdomains for one/few of the SPF providers - won't work for business reasons.
Using an "SPF proxy" - I found only spfproxy.org (now defunct?) and I'm afraid to use them because I can't find who is behind it and they don't answer emails.
What options do I have? Ideally a solution like spfproxy which I can trust would work for me but I could not find any.
domain-name-system spf
domain-name-system spf
edited Mar 20 '17 at 1:03
Simon East
7571916
asked Sep 1 '16 at 14:53
NiroNiro
69721332
edited Mar 20 '17 at 1:03
Simon East
7571916
asked Sep 1 '16 at 14:53
NiroNiro
69721332
edited Mar 20 '17 at 1:03
Simon East
7571916
edited Mar 20 '17 at 1:03
Simon East
7571916
edited Mar 20 '17 at 1:03
Simon East
7571916
7571916
asked Sep 1 '16 at 14:53
NiroNiro
69721332
asked Sep 1 '16 at 14:53
NiroNiro
69721332
asked Sep 1 '16 at 14:53
NiroNiro
69721332
69721332
What spfproxy does doesn't sound very complicated, have you considered implementing the same on your own DNS server?
– kasperd
Sep 1 '16 at 21:18
I use scalr DNS servers. I dont operate them.
– Niro
Sep 2 '16 at 13:24
See also Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record? and PermError SPF Too Many Lookups and Reduction
– Simon East
Mar 19 '17 at 23:08
add a comment |
What spfproxy does doesn't sound very complicated, have you considered implementing the same on your own DNS server?
– kasperd
Sep 1 '16 at 21:18
I use scalr DNS servers. I dont operate them.
– Niro
Sep 2 '16 at 13:24
See also Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record? and PermError SPF Too Many Lookups and Reduction
– Simon East
Mar 19 '17 at 23:08
What spfproxy does doesn't sound very complicated, have you considered implementing the same on your own DNS server?
– kasperd
Sep 1 '16 at 21:18
What spfproxy does doesn't sound very complicated, have you considered implementing the same on your own DNS server?
– kasperd
Sep 1 '16 at 21:18
I use scalr DNS servers. I dont operate them.
– Niro
Sep 2 '16 at 13:24
I use scalr DNS servers. I dont operate them.
– Niro
Sep 2 '16 at 13:24
See also Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record? and PermError SPF Too Many Lookups and Reduction
– Simon East
Mar 19 '17 at 23:08
See also Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record? and PermError SPF Too Many Lookups and Reduction
– Simon East
Mar 19 '17 at 23:08
add a comment |
1 Answer
1
active
oldest
votes
Does your SPF use the mx mechanism? (e.g.,
v=spf1 mx include:spf.example.com ip4:192.0.2.1 -ALL) as the mx mechanism adds lookups that are almost always redundant but you can verify that. You might be able to fix your SPF by removing the mx mechanism.Use an SPF Minimizer to get a more efficient SPF record.
Note: could you post your SPF record here?
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f800496%2fmore-than-10-dns-searches-for-spf%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Does your SPF use the mx mechanism? (e.g.,
v=spf1 mx include:spf.example.com ip4:192.0.2.1 -ALL) as the mx mechanism adds lookups that are almost always redundant but you can verify that. You might be able to fix your SPF by removing the mx mechanism.Use an SPF Minimizer to get a more efficient SPF record.
Note: could you post your SPF record here?
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
add a comment |
Does your SPF use the mx mechanism? (e.g.,
v=spf1 mx include:spf.example.com ip4:192.0.2.1 -ALL) as the mx mechanism adds lookups that are almost always redundant but you can verify that. You might be able to fix your SPF by removing the mx mechanism.Use an SPF Minimizer to get a more efficient SPF record.
Note: could you post your SPF record here?
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
add a comment |
Does your SPF use the mx mechanism? (e.g.,
v=spf1 mx include:spf.example.com ip4:192.0.2.1 -ALL) as the mx mechanism adds lookups that are almost always redundant but you can verify that. You might be able to fix your SPF by removing the mx mechanism.Use an SPF Minimizer to get a more efficient SPF record.
Note: could you post your SPF record here?
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
Does your SPF use the mx mechanism? (e.g.,
v=spf1 mx include:spf.example.com ip4:192.0.2.1 -ALL) as the mx mechanism adds lookups that are almost always redundant but you can verify that. You might be able to fix your SPF by removing the mx mechanism.Use an SPF Minimizer to get a more efficient SPF record.
Note: could you post your SPF record here?
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
edited Sep 1 '16 at 21:34
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
answered Sep 1 '16 at 21:09
Neil AnuskiewiczNeil Anuskiewicz
351214
351214
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
add a comment |
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
Thanks for the advice about removing mx. it reduced from 13 to 12 DNS calls. A step forward. Re SPF minimizer - Im checking this option
– Niro
Sep 2 '16 at 8:58
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
The original spf is v=spf1 a mx include:_spf.salesforce.com include:spf.mail.intercom.io include:_spf.google.com include:spf.mandrillapp.com ~all removing mx brings down to 12. spf.mail.intercom.io can be minimized to spf1.mailgun.org and spf2.mailgun.org so I'm with 11 DNS queries. Now I'm stack. minimizing more causes the spf entry to be longer than 255 characters which is also forbidden
– Niro
Sep 2 '16 at 11:17
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
do you have a dedicated IP address or even range of IP addresses from which you send emails through mailgun? If so, you could move from include to ip4 and get down to 10 or fewer lookups. One more lookup!!
– Neil Anuskiewicz
Sep 11 '16 at 7:24
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
Niro - You're not going to leave us hanging when you're 11 DNS queries! That's like torture for a DNS nerd like myself. Any more progress or are you throwing towel?
– Neil Anuskiewicz
Sep 17 '16 at 18:23
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f800496%2fmore-than-10-dns-searches-for-spf%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
What spfproxy does doesn't sound very complicated, have you considered implementing the same on your own DNS server?
– kasperd
Sep 1 '16 at 21:18
I use scalr DNS servers. I dont operate them.
– Niro
Sep 2 '16 at 13:24
See also Workarounds for maximum DNS-Interactive terms limit exceeded in SPF record? and PermError SPF Too Many Lookups and Reduction
– Simon East
Mar 19 '17 at 23:08