DNS SPF settings to reduce backscatter to catchall...

I use the mail.btinternet.com outbound server to send messages from [email protected]
Spammers are sending messages, spoofing the from address as [email protected]
These spam messages bounce back to my catchall account as undeliverable.
I want to set a SPF type DNS record to help mail servers distinguish between genuine mail from me and spoofed mail from spammers.
Can anyone advise what that SPF record should contain, to allow mail.btinternet.com and exclude others?
Many thanks for any help,
  Nigel.

Thank you. But do I actually need such a record? I'm hoping I can modify the SPF record for mydomain.co.uk to include permission to use the btmail server, which is something like ...cpcloud.co.uk.
  Nigel.

Similar Messages

  • Can't override DNS Server settings - can only append!

    See this thread for a similar question:
    http://discussions.apple.com/thread.jspa?messageID=3555096
    I have also filed this with Apple (Problem ID 5159216). Here is the text of the report (with a few bits removed - not crucial to understanding the report).
    If anyone has suggestions/clues to resolve, please advise. Thanks!
    Summary:
    This problem concerns AirPort Extreme (802.11n) at revision 7.1. I will summarize with a comparison between AirPort and MacOS X.
    MacOS X and Airport Extreme (referred herein as "AE") both permit editing of DNS server settings whether in DHCP or Manual mode.
    When MacOS X DNS server settings are set manually by the end-user, the new server IPs are used (good). When AE's DNS server settings are overridden by the end-user, the new server IPs are NOT used (not good)! Rather, the DHCP-supplied DNS server always pre-empts whatever is given in the AE Configuration UI.
    Steps to Reproduce:
    1. Using AirPort Extreme (802.11n) at revision 7.1 and MacOS 10.4.9 on a MacBook Pro (Core 2 Duo). The AE has been previously configured for IPv4 using DHCP and the MacBook is successfully connected and resolving domain names through the AE.
    2. Visit "Apple Menu > Location > Network Settings" and check the AirPort TCP/IP settings. For purposes of this test, make sure the "DNS Servers" field is EMPTY so MacOS X defaults to the AE's DNS settings, then close System Preferences.
    3. Run "AirPort Utility" (the newer version, not "Airport Admin Utility") and configure the AE under test. Pick the "Internet" icon in the toolbar and note the Internet Connection settings.
    4. In this test, Configure IPv4 is set to "DHCP" and the DNS Server(s) field contains two DNS IPs assigned by the Internet Service Provider. In my case that's Cablevision's Optimum Online service. You may or may not see IP addresses here, but in my case they are visible.
    5. As the DNS Server(s) are editable, and they both show ISP-supplied addresses, they can be changed to whatever alternate IPs you wish. For instance, change them to these alternate DNS IPs from OpenDNS.com: 208.67.222.222 and 208.67.220.220. (You could use any alternate set of IPs but for the purpose of this test use the OpenDNS IPs.) Update the AE and restart.
    (For additional reference, http://www.opendns.com/start/airport.php shows instructions for the older AirPort Admin Utility, but the concept is exactly the same.)
    6. Normally you shouldn't have to restart the MacBook Pro since we're just using the AE settings, but go ahead and do that just to be consistent with this test.
    Expected Results:
    Now for the moment of truth! We want to verify that we're using the OpenDNS IPs for our DNS Servers. One nice feature OpenDNS has is automagic redirection for certain domain name typos.
    Here's an example. Drop to shell (Applications > Utilities > Terminal) and try this command (excluding the $ prompt, natch):
    $ dig craigslist.og
    The "og" typo is deliberate. We really want to go to craigslist.org. If you're using the new OpenDNS IPs, you will STILL get an Address (A) record with an IP like so:
    ;; ANSWER SECTION:
    craigslist.og. 0 IN A 208.69.32.130
    If you had entered "craigslist.og" in Safari, you would end up at 208.69.32.130 (an OpenDNS server) and then redirected to craigslist.org.
    Actual Results:
    Alas, that's not what happens! Instead, you get NO IP address, like so:
    ;; QUESTION SECTION:
    ;craigslist.og. IN A
    This means we're not actually using the OpenDNS IPs. What's happening?
    To find out, I spoke with the AirPort support group (Case # xxx-xxx-xx). I learned that, despite being allowed to edit and override the IP addresses provided via DHCP, the AE still uses the DHCP-provided DNS server if available.
    Again, the user interface suggests that I'm allowed to override the DHCP-provided DNS IPs as shown in the UI. Even though I can do this, the AirPort will still keep note of any DHCP-provided DNS Server IPs and use those first.
    True, I can switch to Manual network settings (and then my own DNS Server IPs take effect). Of course this is problematic when the ISP renews my IP address (which it does from time to time).
    Another workaround is to use the "DNS Servers" settings noted in step 2 (above). However this is also problematic if I want to keep my network settings simple. It requires a "Home Network" location and an "Office" location. Still not preferable, but it's a workaround.
    Regression:
    n/a
    Notes:
    I would like AirPort's DNS settings to be overridden in the same way OS X allows DNS settings to be overridden. The user interfaces suggest this is possible but it is not. It's only possible in the OS X case. Having the same flexibility on the AirPort would be most welcome.

    Afraid of the answer...sheesh...you must be a child. This has nothing to do with masquerading anything. The issue being discussed here is that people want to manually assign a dns server address via the new AEBS, while maintaining DHCP for IP address assignments through their ISP. For example, I would like to have opendns.com take care of all dns addressing at the router level, even though I have "Configure IPv4" set to "Using DHCP". If you do not understand why one would want to use something like opendns.com, please visit their website and enlighten yourself. The fact that the dns server address fields are editable when set to "Using DHCP" leads one to believe that you can manually assign a dns server in this configuration; however, under firmware 7.1.1, you still cannot. The previous iteration of the airport hardware can do it, as can nearly any router you pull off the shelf. In addition, this is something that can easily be done at the individual-computer level in OS X; however, many people would prefer to administer their network at the router level. That is the issue being discussed here. Either you can't read or you are purposely derailing the thread.
    iMac 24"   Mac OS X (10.4.9)  

  • DNS Server settings not working as expected ....?

    Greetings
    I have our load balancer/firewall setup to where if someone enters a hostname like (www.example.com) it points it to a local server at 10.0.1.2
    When logged into the network, the DNS Server that pulls up is 10.0.1.1 (IP of firewall), which is fine, but I also have the two openDNS servers at the 2nd and 3rd slots manually entered.
    If the opendns servers are listed, the ping returns the public IP of www.example.com, but if removed, it does the right thing and pings the internal IP address.
    Even though the 10.0.1.1 DNS server setting is first, it doesn't seem to use that setting when you have DNS servers entered manually.... any idea why and how to make this stop?
    I prefer to leave the opendns settings in the DNS server settings (for when I'm switching around to various networks) ...

    Quick update. Added to a previously filed bug. Looks like it's assigned now so maybe we'll see a fix for this soon.
    https://bugzilla.mozilla.org/show_bug.cgi?id=563169

  • Can't connect to mail server - DNS Server settings?

    Hello:
    Let me preface this question by saying that computer networking is not my strong suit.
    Last week I moved our web hosting from our ISP to Lunarpages; our domain is marshall-arts.net. I set up some POP email accounts on our new mail servers and was able to successfully send and receive email wirelessly using our G4 ibook. However, none of our networked desktop systems could connect to our new mail server, although they could connect to our ISP's mail server; they also have no problem connecting to the web. The mail server and user names were identical between the desktop systems and the ibook. But upon closer examination of the TCP/IP settings of the ibook I found that the ibook had 209.253.113.10 entered into the DNS Servers (optional) field. That field was blank in the desktop systems. Once I entered that address into the DNS Servers field on the desktop systems they had no problem connecting to our Lunarpages mail servers.
    Here's our setup, as best as I can describe it:
    We have an AirPort Extreme connected to our DSL router. It's connected via ethernet, configured manually with a static IP, router and DNS server addresses provided by our ISP. It's set to distribute IP addresses with the AirPort client computers sharing a single IP address using DHCP and NAT (10.0.1.1. addressing). It's connected via ethernet to a Linksys gigabit ethernet switch to which we have connected three desktop Macs running OS 10.3.x and 10.4.x.
    The TCP/IP of the three desktop systems and the ibook are configured Using DHCP.
    As I wrote above, only the ibook had an address entered into the DNS Servers field, 209.253.113.10. This doesn't correspond to anything our ISP provided (those addresses are entered in the AirPort Extreme.) I have no idea where it came from.
    So I have two questions:
    Would that address have been generated automatically while setting up the AirPort connection on the ibook?
    Why would that supposedly optional DNS Server address be required for me to connect to our new mail servers (but not our old ISP mail servers)?
    Thank you.
    Shawn Marshall
    Marshall Arts Motion Graphics
    Dual 2.5 Ghz G5   Mac OS X (10.4.7)  
    Dual 2.5 Ghz G5   Mac OS X (10.4.7)  

    Hello:
    Let me preface this question by saying that computer networking is not my strong suit.
    Last week I moved our web hosting from our ISP to Lunarpages; our domain is marshall-arts.net. I set up some POP email accounts on our new mail servers and was able to successfully send and receive email wirelessly using our G4 ibook. However, none of our networked desktop systems could connect to our new mail server, although they could connect to our ISP's mail server; they also have no problem connecting to the web. The mail server and user names were identical between the desktop systems and the ibook. But upon closer examination of the TCP/IP settings of the ibook I found that the ibook had 209.253.113.10 entered into the DNS Servers (optional) field. That field was blank in the desktop systems. Once I entered that address into the DNS Servers field on the desktop systems they had no problem connecting to our Lunarpages mail servers.
    Here's our setup, as best as I can describe it:
    We have an AirPort Extreme connected to our DSL router. It's connected via ethernet, configured manually with a static IP, router and DNS server addresses provided by our ISP. It's set to distribute IP addresses with the AirPort client computers sharing a single IP address using DHCP and NAT (10.0.1.1. addressing). It's connected via ethernet to a Linksys gigabit ethernet switch to which we have connected three desktop Macs running OS 10.3.x and 10.4.x.
    The TCP/IP of the three desktop systems and the ibook are configured Using DHCP.
    As I wrote above, only the ibook had an address entered into the DNS Servers field, 209.253.113.10. This doesn't correspond to anything our ISP provided (those addresses are entered in the AirPort Extreme.) I have no idea where it came from.
    So I have two questions:
    Would that address have been generated automatically while setting up the AirPort connection on the ibook?
    Why would that supposedly optional DNS Server address be required for me to connect to our new mail servers (but not our old ISP mail servers)?
    Thank you.
    Shawn Marshall
    Marshall Arts Motion Graphics
    Dual 2.5 Ghz G5   Mac OS X (10.4.7)  
    Dual 2.5 Ghz G5   Mac OS X (10.4.7)  

  • Are my DNS scavenging settings correct? Server 2008 r2

    hi
    i cant seem to get my DNS scavenging to work correctly.
    i have inherited the network from another network admin who has left.
    Scavenging is enabled on the server 
    when i went into the
    dnscmd /zoneinfo domain.com
    , it never returned a DNS scavenging server, think this was because a domain controller was removed serveral years ago and that was set as the scavenger perhaps? not sure. 
    so i ran the command
    dnscmd /ZoneResetScavengeServers domain.com 192.168.1.194
    This added a new scavenging server but still cant get scavanging to work these are my settings do they look correct?
    i noticed directory partition is set to AD-legacy is this correct some of the screenshots i have seen online show this as AD-Domain not AD-legacy can anyone compare with there settings that function and let me know?
    Any suggestions would be highly appreciated. 
    Thank you
    Gordon

    AD-Legacy means they aren't in an application partition, which didn't come until after 2003, so I'm guessing this domain was built originally as Windows 2000 and then been upgraded.  Nothing to worry about.
    I have never done this but you can change this via dnscmd and the switch zonechangedirectorypartition
    As far as scavenging, it takes 14 days for this to kick in.  How long have you waited since you reconfigured the settings?
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security, BS CSci
    2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
    Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
    Please no e-mails, any questions should be posted in the NewsGroup.
    This posting is provided AS IS with no warranties, and confers no rights.

  • Domain Controllers that are DNS servers DNS Client settings

    [Copying verbatim from a mail by Joe ]
    So I have been pinged by a few folks recently on configuration of client DNS settings on Domain Controllers that are also functioning as DNS Servers. Lots of debate. I understand there has been long time debate within MSFT as well.
    From http://blogs.technet.com/b/askds/archive/2010/07/17/friday-mail-sack-saturday-edition.aspx there
    is the quote
    "3.When referencing a DNS server on itself, a DNS client should always use a loopback address and not a real IP address."
    From http://www.microsoft.com/en-us/download/confirmation.aspx?id=9166 (Windows
    Server 2008 R2 Core Network Guide)
    "9.        In Preferred DNS server, type the IP address of your DNS server. If you plan to use the local computer as the preferred DNS server, type the IP address of the
    local computer.
    10.       In Alternate DNS Server, type the IP address of your alternate DNS server, if any. If you plan to use the local computer as an alternate DNS server, type the IP address of
    the local computer."
    From http://technet.microsoft.com/en-us/library/dd378900(v=ws.10).aspx (DNS:
    DNS servers on <adapter name> should include their own IP addresses on their interface lists of DNS servers)
    "The inclusion of its own IP address in the list of DNS servers improves performance and increases availability of DNS servers. However, if the DNS server is also a domain controller and it points only to
    itself for name resolution, it can become an island and fail to replicate with other domain controllers. For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller. The loopback address should
    be configured only as a secondary or tertiary DNS server on a domain controller...
    Add the loopback IP address to the list of DNS servers on all active interfaces. The loopback IP address should not be the first server in the list."
    ESPECIALLY "For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller. The loopback address should be configured only as a secondary or tertiary
    DNS server on a domain controller." and "Add the loopback IP address to the list of DNS servers on all active interfaces. The loopback IP address should not be the first server in the list."
    Why shouldn't loopback not be first, the justification is why you shouldn't only use loopback, not why it shouldn't be first.
    From http://technet.microsoft.com/en-us/library/ff807362(v=ws.10).aspx (DNS:
    DNS servers on <adapter name> should include the loopback address, but not as the first entry)
    "If the loopback IP address is the first entry in the list of DNS servers, Active Directory might be unable to find its replication partners. 
    The inclusion of its own IP address in the list of DNS servers improves performance and increases availability of DNS servers. However, if the DNS server is also a domain controller and it points only to itself,
    or points to itself first for name resolution, this can cause a delay during startup. For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller. The loopback address should be configured only
    as a secondary or tertiary DNS server on a domain controller."
    This also seems like justification against only using loopback versus using it first.
    Are there any actual real documented issues for using loopback first and a remote DNS server second and perhaps third? If the local DNS server service isn't working yet (or at all), I would expect the DNS Client process
    to try to connect to it, fail, and then failover to the secondary just like I would expect it to failover if the remote DNS server was secondary and it was unavailable and it failed back to the loopback. Am I making a bad assumption?
    And by documented I don't mean random responses to questions on the internet or other such items. I mean a KB article or technet article or properly researched and tested other web article from a reliable resource.
    thanks, 
    joe

    As I understand it, the scenario whereby a DC could become an 'island' if it points only to itself, or to itself first, was repaired in the Windows Server 2003 product cycle. See
    http://support.microsoft.com/kb/275278 for information about this scenario.
    However, there is still a known problem of slow boot times that can occur. See
    http://support.microsoft.com/kb/2001093 for information about this. The scenario that is discussed assumes there is a power failure and servers shut down due to overheating while on backup power. When
    multiple servers come online simultaneously after power is restored, there can be a significant delay.
    The recommended configuration is one that avoids a single point of failure, but also tries to optimize the speed of resource record registration, so that Active Directory can properly synchronize.
    -Greg

  • DNS SPF Bounce Back Issue

    Hello,
    I am trying to send an email from IP: 64.32.183.2 to email: [email protected] and get this bounce back email.
    Do any of you know what I need to create on the TXT record for the DNS? I've created an SPF record but still get an error message.
    See the testconnectivity results below. Any help would be appreciated!
    Performing Outbound SMTP Test
      The outbound SMTP test failed.
    Additional Details
    Elapsed Time: 24104 ms.
    Test Steps
    Attempting reverse DNS lookup for IP address 64.32.183.2.
      The Microsoft Connectivity Analyzer successfully resolved IP address 64.32.183.2 via reverse DNS lookup.
    Additional Details
    The Microsoft Connectivity Analyzer resolved IP address 64.32.183.2 to host smtp.wemanageproperties.com.
    Elapsed Time: 86 ms.
    Performing Real-Time Black Hole List (RBL) Test
      Your IP address wasn't found on any of the block lists selected.
    Additional Details
    Elapsed Time: 23609 ms.
    Test Steps
    Checking Block List "SpamHaus Block List (SBL)"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 901 ms.
    Checking Block List "SpamHaus Exploits Block List (XBL)"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 872 ms.
    Checking Block List "SpamHaus Policy Block List (PBL)"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 1045 ms.
    Checking Block List "SpamCop Block List"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 91 ms.
    Checking Block List "NJABL.ORG Block List"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 8349 ms.
    Checking Block List "SORBS Block List"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 3773 ms.
    Checking Block List "MSRBL Combined Block List"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 241 ms.
    Checking Block List "UCEPROTECT Level 1 Block List"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 71 ms.
    Checking Block List "AHBL Block List"
      The address isn't on the block list.
    Additional Details
    IP address 64.32.183.2 wasn't found on RBL.
    Elapsed Time: 8262 ms.
    Performing Sender ID validation.
      Sender ID validation failed.
    Additional Details
    Elapsed Time: 407 ms.
    Test Steps
    Attempting to find the SPF record using a DNS TEXT record query.
      The SPF record was found.
    Additional Details
    SPF record found: "v=spf1 a mxv=spf1 a mx a:corepoweryoga.com mx:exchange.corepoweryoga.com ip4:173.239.121.125 a mx ~all"
    Elapsed Time: 87 ms.
    Parsing the SPF record and evaluating mechanisms and modifiers.
      SPF record evaluation resulted in a Sender ID failure.
    Additional Details
    Elapsed Time: 320 ms.
    Test Steps
    Evaluating A Record lookup mechanism: "+a"
    Additional Details
    The DNS A Record lookup for IP address 64.32.183.2 found no match for domain 'corepoweryoga.com'.
    Elapsed Time: 2 ms.
    Evaluating A Record lookup mechanism: "+a"
    Additional Details
    The DNS A Record lookup for IP address 64.32.183.2 found no match for domain 'corepoweryoga.com'.
    Elapsed Time: 0 ms.
    Evaluating MX mechanism: "+mx"
    Additional Details
    No MX records for domain corepoweryoga.com matched the specified IP address.
    Elapsed Time: 123 ms.
    Evaluating A Record lookup mechanism: "+a:corepoweryoga.com"
    Additional Details
    The DNS A Record lookup for IP address 64.32.183.2 found no match for domain 'corepoweryoga.com'.
    Elapsed Time: 0 ms.
    Evaluating MX mechanism: "+mx:exchange.corepoweryoga.com"
    Additional Details
    No MX records exist for exchange.corepoweryoga.com.
    Elapsed Time: 84 ms.
    Evaluating IP address mechanism: "+ip4:173.239.121.125"
    Additional Details
    IP address 64.32.183.2 didn't match entry 173.239.121.125.
    Elapsed Time: 0 ms.
    Evaluating A Record lookup mechanism: "+a"
    Additional Details
    The DNS A Record lookup for IP address 64.32.183.2 found no match for domain 'corepoweryoga.com'.
    Elapsed Time: 0 ms.
    Evaluating MX mechanism: "+mx"
    Additional Details
    No MX records for domain corepoweryoga.com matched the specified IP address.
    Elapsed Time: 108 ms.
    Evaluating All mechanism: "~all"
      All mechanisms indicated a negative status.
    Additional Details
    Status: SoftFail
    Elapsed Time: 0 ms.               

    Another bounce back due to SPF Policy Error for another domain.
    Diagnostic information for administrators:
    Generating server: PMA-EXCAS01.wemanageproperties.com
    [email protected]
    barracuda.helmethouse.com #550 Rejecting for Sender Policy Framework ##
    Original message headers:
    Received: from pma-exmb01.wemanageproperties.com ([fe80::10ec:db0c:8782:d59d]) 
    by pma-excas01.wemanageproperties.com ([fe80::7d06:c4ad:5136:3b0f%11]) with 
    mapi id 14.03.0123.003; Mon, 27 Oct 2014 09:03:53 -0700
    From: Jodi Stancampiano <[email protected]>
    To: "'[email protected]'" <[email protected]>
    CC: Gabriela Ramirez <[email protected]>
    Subject: Accelerated Invoices
    Thread-Topic: Accelerated Invoices
    Thread-Index: Ac/x/5U3XYbSLuU0RYa8t07SCk++9Q==
    Date: Mon, 27 Oct 2014 16:03:43 +0000
    Message-ID: <[email protected]rties.com>
    Accept-Language: en-US
    Content-Language: en-US
    X-MS-Has-Attach: yes
    X-MS-TNEF-Correlator:
    x-originating-ip: [10.0.20.104]
    Content-Type: multipart/mixed;
    boundary="_009_ED01ED2222E4A943987C4EEA7623C5741D323D42pmaexmb01wemana_"
    MIME-Version: 1.0

  • Best Compression Settings for Reduced File Sizes

    I've been compressing MP4s and trying to improve the video file size but I'm surprised that Adobe Media Encoder is creating larger file sizes despite reducing the dimensions and audio quality. I've tried MP4 and FLV export settings. Does anyone have any recommendations?

    Hi(Bonjour)!
    See this link:
    http://www.kenstone.net/fcphomepage/qt_movies_fromfcp.html
    Michel Boissonneault

  • Change DNS client settings

    Hi,
    I have the following problem.
    We are using ZENworks 3.2 and we have some clients which have the internal
    DNS server manually configured in the TCPIP settings. I want to change
    that to "automatically", so the client gets the DNS Servers from the DHCP
    server. Hava anybody experience how can I do that with ZENworks?
    Many thanks
    Josef

    There are some freeware tools that can do this.
    Sorry I can't recall the name.
    I think they may even be provided by MS.
    ZEN could be used to simply call the tools if found.
    [email protected] wrote:
    > Hi,
    > I have the following problem.
    > We are using ZENworks 3.2 and we have some clients which have the internal
    > DNS server manually configured in the TCPIP settings. I want to change
    > that to "automatically", so the client gets the DNS Servers from the DHCP
    > server. Hava anybody experience how can I do that with ZENworks?
    >
    > Many thanks
    > Josef
    Craig Wilson
    Novell Product Support Forum Sysop
    Master CNE, MCSE 2003, CCN

  • DNS spf record for Microsoft

    The spf record for Microsoft has a “ ~ALL “.  What does this do and how do we make use of the same for our domain names?
    NSLOOKUP Output for Microsoft.com:
    > server 4.2.2.1
    Default Server:  vnsc-pri.sys.gtei.net
    Address:  4.2.2.1
    > set type=ANY
    > microsoft.com
    Server:  vnsc-pri.sys.gtei.net
    Address:  4.2.2.1
    Non-authoritative answer:
    microsoft.com   text =
            "v=spf1 mx include:_spf-a.microsoft.com include:_spf-b.microsoft.com inc
    lude:_spf-c.microsoft.com include:_spf-ssg-a.microsoft.com ~all"
    microsoft.com
            primary name server = dns.cp.msft.net
            responsible mail addr = msnhst.microsoft.com
            serial  = 2007053102
            refresh = 300 (5 mins)
            retry   = 600 (10 mins)
            expire  = 2419200 (28 days)
            default TTL = 3600 (1 hour)
    microsoft.com   MX preference = 10, mail exchanger = maila.microsoft.com
    microsoft.com   MX preference = 10, mail exchanger = mailb.microsoft.com
    microsoft.com   MX preference = 10, mail exchanger = mailc.microsoft.com
    microsoft.com   internet address = 207.46.232.182
    microsoft.com   internet address = 207.46.197.32
    microsoft.com   nameserver = ns4.msft.net
    microsoft.com   nameserver = ns5.msft.net
    microsoft.com   nameserver = ns1.msft.net
    microsoft.com   nameserver = ns2.msft.net
    microsoft.com   nameserver = ns3.msft.net
    ==
    Thanks,

    Mechanisms are prefixed with qualifiers:
    "+" Pass
    "-" Fail
    "~" SoftFail
    "?" Neutral
    Mechanisms are evaluated in order and when no matche, the default will be "Neutral".
    If there is no SPF for a domain, the result is "None". If a domain has a temp error during DNS processing, you get the result "TempError" (called "error" in earlier drafts). If some kind of syntax or evaluation error occurs (eg. the domain specifies an unrecognized
    mechanism) the result is "PermError" (formerly "unknown").
    Evaluation of an SPF record can return any of these results:
    Pass -The SPF record designates the host to be allowed to send accept
    Fail -The SPF record has designated the host as NOT being allowed to send reject
    SoftFail - The SPF record has designated the host as NOT being allowed to send but is in transition accept but mark
    Neutral - The SPF record specifies explicitly that nothing can be said about validity accept
    None - The domain does not have an SPF record or the SPF record does not evaluate to a result accept
    PermError - A permanent error has occured (eg. badly formatted SPF record) unspecified
    TempError - A transient error has occured accept or reject
    Marcus @ www.wormy.com

  • DNS Server Settings Recommendations

    Does anyone have any recommendations for dns settings? Internal, external? advantages/ disadvantages? security issues?                  

    Remmended as the defaults, is to use Internet root DNS servers. I have seen issues while handling large amount of messages (incoming) and using Internal/Private DNS servers (performance).
    There may be others able to share their thougts about security but it is my understanding that this can also work to support the recommended setting, to use Internet root DNS servers.
    Regards,
    -V

  • Trying to lock down DNS server settings to force use of OpenDNS

    I'm trying to lock down my time capsule on my home network to only allow outgoing DNS traffic to go through OpenDNS. I  have an 18 year old son, with his own computer, who bypasses my OpenDNS by entering the DNS settings for Google on his Windows 7 machine. I have no control over his machine, only my router.
    A discussion on the OpenDNS forums mentions blocking port 53 and forcing all DNS traffic through the OpenDNS server settings I've entered into my router, but I can't see any way to do this on the time capsule. Am I missing something?

    There is nothing you can do.. TC do not have access to firewall.. at least for ipv4.
    You need a much better router.. bridge the TC and grab a Netgear WNDR3800 and run Gargoyle firmware. The power will be put back in your hands.. then he will buy his own 3G connection.. maybe at 18 it is rather too late.

  • Change DNS server settings

    Hi All, When I log into my router I can not find on any of the tabs where to change my DNS sever any ideas?                                                          Thanks Debbie

    Just came across this when looking for a way to change the server settings as I use my Sky Router as a backup measure (i.e. it's set up, ready to go, but for the moment, just serves the internet over one of the Ethernet ports via a better router and wireless network in my house). Anyway, as there doesn't seem to be a way to sort the DNS settings on the router itself, I would suggest the following to those who are looking to use OpenDNS (which is why I'm looking to do it). Disable the Wireless network on your Sky Box and plug in a cable DSL router (i.e. a router that doesn't have ADSL on it, but has an ethernet internet port for connecting to a router - or one that has that ability (some have multiple options to allow for failsafe - but anyway)).  Google "wireless cable DSL router" and look in the shopping section for an idea of them. Setup the new router as per the manufacturers instructions and connect the new router to the Sky Box by the ethernet port.  Now, assuming you've turned off the Wireless on the Sky Router (found under setup on the Sky router interface (192.168.0.1 from your computer normally unless you've changed it)) when you connect up the new router, this should be the only thing that is supplying internet into your home and you should be able to change the DNS settings on the router (make sure of this before you buy it just in case, but most of them you can do) and that way anything that is passed through the new router, even when it heads out on the Sky connection will use the new DNS settings. Ok, so it's a bit of a hassle and might cost you £20-£30, but if it's to use OpenDNS or such services for the protection of your family when browsing online, it's money well spent IMHO. Of course, if Sky had any nouce about them, they would simply give an option to use either their own DNS servers or the OpenDNS servers, even if they don't allow full customisation of them, especially with all the recent news about eSafety for people at home.  It would just make a lot of sense as far as I see. There are some routers out there now which fully intergrate with the OpenDNS service (Google OpenDNS Router to find some examples - a lot of NetGear ones now do - just makes it easier if you're a bit green on the techy front, though OpenDNS offer a lot of assistance and walk throughs on their own site too. 

  • Export Settings to Reduce Titles Fading

    Quite new to Premiere Pro.  Did a few searches with no hits. 
    I created some titles and then exported the video varying the settings.  The "match sequence settings" version looks fine but as soon as I use H.264 compression, the title track fades significantly. 
    I tried adjusting bitrate and using different compression methods but the results are about the same.  Only the "uncompressed" one looks right.
    Any suggestions?

    Exported (faded) version top and raw version bottom.
    My primary display media will be computers since we will be sending to engineering clients and we want to make sure they are viewable there. 

  • New Domain controller, DNS client settings before FSMO transfer

    I recently promoted a new domain controller.  It is the fourth domain controller and third in the site.  I plan to decommission the other two domain controllers in the site leaving just the new one.   Right now the new domain controller points
    its tcp\ip client to the other other domain controller\DNS servers as primary and itself at the bottom.  The other domain controllers point to themselves as primary and the newest domain controller on the bottom of the list.  Clients on the network
    use the original domain controllers as DNS from DHCP first and then the new domain controller DNS.  Is it okay to transfer all the FSMO roles to the new domain controller or should I make all the DNS clients point to it first?

    Hi,
    It is possible to first change your FSMO roles and after this is done then point your DNS clients to the new DC. This should not be a problem.
    some interesting information about assigning your FSMO Roles: http://www.windowsdevcenter.com/pub/a/windows/2004/06/15/fsmo.html
    Hope this helps you out.

Maybe you are looking for

  • Huge volume of data not getting processed

    Hello Everyone, Its a single file to multiple idoc scenario. There is no mapping involved. But the problem is that the file is of size 50 MB having 50000 idocs . This idocs get divided and are sent to BW for reporting based on the  message id . Now s

  • Image size not showing when inserting into html

    I have Dreamweaver CS3 I noticed after inserting a bunch of images using the html pane I noticed that the image sizes where not showing in the html, i.e <li><img src="pics/customerphoto/thmbs/100_0223_thmb.JPG" alt="guitar rack" /></li> however, when

  • Transfering files from Zen Sleek to an Ip

    Just to preface, I do love my Zen Sleek, and think it's far superior to the Ipod in nearly everyway, but alas, I got an 80 gb Ipod for christmas, and decided I should use it. Is it easy to transfer files from my Zen Sleek to the Ipod? How would one d

  • Can't update PhotoShop raw update

    I have been to busy to follow up on this but when the PhotoShop raw update 6.5 came via Premiere Elements it would not update but did not give a reason. It continues to try to update with no success. I use Win7 64bit. Any thoughts??? Sherry

  • How do I calculate the a grandtotal field adding 3 numberic values that are calculate in the form

    Currently I am creating a form: Hours Rate Total Hours 1 (manually entered) Rate 1 (manually entered) Hours 1 * Rate1 Hours 2 (manually entered) Rate 2 (manually entered) Hours 2 * Rate 2 Hours 3 (manually entered) Rate 3 (manually entered) Hours 3 *