SPF Record Not Configured Correctly

[Anonymous]

I've been getting a notification saying that our SPF information is not configured correctly in the domain's DNS record. I notified my IT department, and they confirmed that this is the entry that we have in place:

   "v=spf1 a mx ip4:69.25.141.65 ip4:69.25.141.105 ip4:69.25.141.106 include:mktomail.com include:spf.protection.outlook.com ~all"

As far as I can tell from the Marketo instructions, we have configured it correctly.  But when I run the DNS check, I still get the error that it isn't set up correctly.  What am I missing??

Thanks!

[SanfordWhiteman]

That's a well-formed SPF record.  What's the domain?

[Anonymous]

unifysquare.com

[Grégoire_Miche2]

Hi Lisa,

Although it is well formed, as Sanford says, the SPF can be invalidated because one of the entries does not publish a SPF record.

We need the domain to run a test.

You can use some online testing tools such as SPF Query Tool

-Greg

[Anonymous]

unifysquare.com

[Grégoire_Miche2]

Hi Lisa Heay,

This is what the testing tool says :

SPF record lookup and validation for: unifysquare.com

SPF records are published in DNS as TXT records.

The TXT records found for your domain are:

PEt0+5E5267NlODDgqNRXDt5IwWEbTftpILWiCtZpYAyTACz8bb8pLP7++j2XOV3WlYEPJxWdKFK9lABfMq/vw==

v=spf1 a mx ip4:69.25.141.65 ip4:69.25.141.105 ip4:69.25.141.106 include:spf.protection.outlook.com ~all

MS=9ED63B12D148FAE453FC34947ABCD4D5CF877EAA

DNS Type SPF SPF records found for the domain are:

v=spf1 a mx ip4:69.25.141.65 ip4:69.25.141.105 ip4:69.25.141.106 include:mktomail.com include:spf.protection.outlook.com ~all

DNS Type SPF use has been removed in the standards track version of SPF, RFC 7208. These records should be removed.

Checking to see if there is a valid SPF record.

Results - Record may be valid, but ambiguous: v=spf1 records of both type TXT and SPF (type 99) present, but not identical

Found v=spf1 record for unifysquare.com:

v=spf1 a mx ip4:69.25.141.65 ip4:69.25.141.105 ip4:69.25.141.106 include:spf.protection.outlook.com ~all

-Greg

[Anonymous]

Thanks! - I will pass this along to IT.

[SanfordWhiteman]

Tell them to copy the current SPF Type 99 record over the SPF TXT record, as the Type 99 record is more complete.

Then delete the Type 99 record.