SPF Record edit to remove worldsecuresystems as an mx:?

How can I remove "mx: include:worldsecuresystems.com" from my SPF Record? I use GMail as my provider, and whether I edit the record or delete it and create a new one, "mx: include:worldsecuresystems.com" gets placed back into the text.
Anybody know why this might be?
WorldSecureSystems is the nameserver, not a mail exchange.
Thanks in advance!
Scott

You're right, it is probably my misunderstanding of the SPF Record at fault here.................... Coupla points, if I could ask for further advice,
(1) BC sends no mail for me. I use it only for web admin. Is it still gonna want to auto-populate its MX: entry into the SPF record?
(2) I'm getting the following error from a kitterman.com spf validation test.........
Input accepted, querying now...
evaluating v=spf1 mx include:worldsecuresystems.com a:google.com mx:ASPMX.L.google.com mx:googlehosted.com mx:zoho.com include:zcsend.net include:spf.ihance.net include:_spf.google.com ~all ...
Results - record processed without error.
The result of the test (this should be the default result of your record) was, ambiguous . The explanation returned was, SPF Ambiguity Warning: No MX records found for mx mechanism: www.greaterintell.com.
Additionally, my email Campaign software cannot verify the SPF portion of an Email Authorization validation. Trying to get things the way they should be................
Bottom line problem is that my penetration rating on email campaigns is not where I would expect it to be, I'm only at about 10%. I must be getting recognized as spam to some degree, some where.........
Appreciate any thoughts you might have.

Similar Messages

Leopard DNS Server: Zones with SPF records?

Hi all,
I'm trying to figure out how to setup SPF (Sender Policy Framework) records for some domains I'm currently managing with a Leopard DNS server and I don't see any documentation anywhere. Can someone please tell me if it's even an option? I'm new to running DNS with Leopard, so I could use all the help I can get.
Sincerely,
Israel
Message was edited by: Israel Thompson
Message was edited by: Israel Thompson

Israel Thompson wrote:
So let me see if I have this right. Any changes I want to make that will not be editable in the GUI, I want to do them in db.mydomain.com instead of db.mydomain.com.zone.apple? Easy enough. However I tried adding "v=spf1 a mx ~all" (with quotes) to my file and it appeared to have broken the dns zone. What’s the proper way to enter these in manually? Can you give me an example of how it looks in your zone files? I’ve pasted a sample of mine below. Tell me if anything is wrong.
Israel,
I am new to Leopard Server - so I'm no DNS guru. I, too, have not used a DNS setup tool that requires a FQDN just associate an IP with the base of the domain (mydomain.com.). How did you get your 'mydomain.com. IN A 11.22.33.44' accomplished? Did you create a new A record and put mydomain.com. in the Machine Name field?
Here's my setup:
========================
db.mydomain.com
========================
;THE FOLLOWING INCLUDE WAS ADDED BY SERVER ADMIN. PLEASE DO NOT REMOVE.
$INCLUDE /var/named/zones/db.mydomain.com.zone.apple
========================
db.mydomain.com.zone.apple
========================
$TTL 10800
mydomain.com. IN SOA ns1.mydomain.com. admin.mydomain.com. (
2008010951 ;Serial
7200 ;Refresh
3600 ;Retry
604800 ;Expire
345600 ;Negative caching TTL
mydomain.com. IN NS ns1.mydomain.com.
mydomain.com. IN NS ns.mydomain.com.
mydomain.com. IN A 64.251.168.218
mydomain.com. IN TXT "v=spf1 ip:64.251.168.218 ip:64.251.168.220 ~all"
www IN A 64.251.168.218
mail.mydomain.com. IN A 64.251.168.220
mail.mydomain.com. IN TXT "v=spf1 a ~all"
xserve.mydomain.com. IN A 64.251.168.218
xserve.mydomain.com. IN TXT "v=spf1 a ~all"
ns IN A 64.251.168.218
ns1 IN A 64.251.168.220
mydomain.com. IN MX 10 mail.mydomain.com.
... where xserve.mydomain.com is my machine's hostname.
I have a funky setup for DNS because I don't have a different, or second, DNS server (just the one on my Xserve with everything else) and my name servers are under this zone. I added the two IPs for my mail and hostname to the base SPF record. Someone could still spoof from using the name or www domains (same IPs) but I can check for it using Postfix up front. I also added "v=spf1 a ~all" in case another mail server tries to check the mailing server or hostname directly.
You'll usually want to set a TXT "v=spf1 ~all" (SPF null) for any records that have no possibility for mail origins, like your ftp and mobile, but it appears you also have a similar issue to me - those services will be running under the same IPs as the mail service. This is why I added "v=spf1 a ~all" to all essential services (mail and hostname). I don't know what will happen if you add an SPF null to an unnecessary service that happens to also have the same IP. (Will the IP get blocked in a cache during a lookup??) So I didn't add an SPF TXT to those domains. I'm a little confused at this point. I should probably read more about it.
http://www.openspf.org/FAQ/Common_mistakes
Also, you'll notice I added FQDN to mail and xserve. If I do this and ensure they are in my reverse DNS PTR records then I've seen that when I add new zone records with same IPs (like for another domain) then the PTR records don't keep switching to the newest entry (why does it do that?).
I don't think your use of the . in the CNAME records is correct. I think the CNAME records are probably unnecessary since you have already fully defined the domains in A records. Also, those A records probably don't need FQDNs (with the ending .). I only added mine for the reason noted above, concerning the PTR records.
I hope someone who knows some more than I can chime in on this.
Larry
Message was edited by: Larry_S (removed mx from SPF TXT for main domain record, as it was redundant with the ip:)

Virtual mail hosts: 255 character limit on SPF records

This one was a surprise to me, and caused a lot of headache, so I thought I'd pass it along.
I'm running multiple virtual mail hosts off of my doughty PowerMac single G5 1.8GHz running OS X Server 10.4.11. Some of the outgoing mail was being bounced as spam because a) there wasn't an SPF record on any of the domains and b) the domain of the mailserver didn't always match the domain of the sender. (Most often, it went out under the hostname of the server, cerberus.limbo.jcf.org—which is useless, since that's a LAN address.)
Trying to be a good citizen (and make sure that all of everyone's mail got through), I added SPF records that explicitly named each and every mailserver on the machine, just so that everything was clear and aboveboard—but they ended up being about 500 characters long.
Fastforward a week or two... and I was having problems with my DNS zones loading—I'd get errors that they'd timed out. After pulling my hair out for a while, I discovered that TXT records have a limit of 255 characters (including spaces, etc.) Some folks running servers on non-OS X Server machines have split the records over multiple TXT records (does that even work?), but you get exactly one TXT record per OS X Server machine: the Comment box.
I've now simplified the SPF records so that they read something like this:
+v=spf1 a mx mx:cerberus.limbo.jcf.org mx:cerberus.jcf.org mx:jcf.org ip:173.164.140.96/30 ip:207.58.140.213/30 include:comcast.businessclass.net include:comcast.com -all+
To translate:
• +v=spf1 a mx+ It authorizes deliveries from any IP listed in the DNS zone, and from any mailserver defined in the zone
• +mx:cerberus.limbo.jcf.org mx:cerberus.jcf.org mx:jcf.org+ It also explicitly authorizes deliveries from the server's main LAN and internet DNS names as well as the domain of the foundation for which I work (and through which emails are occasionally relayed)
• +ip:173.164.140.96/30 ip:207.58.140.213/30+ Next it authorizes the public static IP blocks for the server and the foundation's remote server
• +include:comcast.businessclass.net include:comcast.com+ Finally it includes the domain names of the ISP through which most of the mail are relayed
• -all The last item says that if the mail didn't originate from one of those addresses, it isn't ours.
(I think that I've got that right. If I've botched it anywhere, let me know, okay?)
That's 169 characters. The DNS zones loaded happily, and the mail seems to be going out without getting bounced. So far so good!
(There's probably a way to get the hostname on each email to match the domain from which it is being addressed, but I haven't gotten there yet.)
Message was edited by: David Kudler

Most often, it went out under the hostname of the server, cerberus.limbo.jcf.org—which is useless, since that's a LAN address.
You can control this via the myhostname setting in Postfix. This defines the name it uses to identify itself to remote mail servers, which sounds like it'll address a lot of your issues.
I added SPF records that explicitly named each and every mailserver on the machine, just so that everything was clear and aboveboard—but they ended up being about 500 characters long.
OK, this doesn't make sense. You don't need to list every virtual hostname for every domain.
All you need to do is add this specific mail server's address in each domain.
There's no requirement that the hostname of the mail server matches the domain name, so it's entirely valid to create an SPF record in domain1.com that lists mailserver.someotherdomain.com as authoritative. Then, as long as postfix's myhostname says it's mailserver.someotherdomain.com and your reverse DNS resolves to that address your problem is solved.
...but you get exactly one TXT record per OS X Server machine: the Comment box.
Unless you edit your zone file directly and add whatever other records you like. However, given the above, I don't think the 255-character limit should be an issue.
Even if you didn't want to mess with your zone files directly there's still a way around that - SPF allows for an 'include' record which basically tells remote servers to include the record from some other domain, so for each domain you could just tell it to include some other domain's record (which, in turn, could include another domain) allowing virtually unlimited record length (or, at least, 255 characters per domain you manage).
SPF Includes are covered here.
• include:comcast.businessclass.net include:comcast.com Finally it includes the domain names of the ISP through which most of the mail are relayed
Bzzzz. You've now allowed any other customer of comcastbusiness.net and comcast.com to send mail on your behalf. You probably don't want to do that. When you consider that 'comcast.com' includes every one of their residential customers you can see that you really don't want to do that.

SPF Record?

Does anyone know about this? If so is this separate from the MX record? IS it really needed? Opinions please...

The SPF record and the MX record are two different things.
You can get some background concerning SPF records at:
http://www.openspf.org/Introduction
It is a good idea to publish a SPF record; however, (in my opinion) I would set the SPF record so that it will SoftFail ("~all").
Whether to have SpamAssassin evaluate SPF records (by installing the SPF perl module, see the instructions here: http://discussions.apple.com/thread.jspa?messageID=3813471 ) as a method to filter spam is another issue. Pterobyte did a stellar job of evaluating whether or not to do so. You can read his posts concerning this issue here (his conclusion, and I agree, is not to bother):
http://discussions.apple.com/thread.jspa?messageID=3800656
This matter is "kind" of like one of those liberal vs. conservative political issues that many folks have an opinion about, but I'll try and give you my experience with this. Back in January I set SpamAssassin to evaluate SPF records for the purpose of filtering for spam. I eventually removed the filtering for the reasons Pterobyte outlined and the reasons below:
(1) Most Domains SoftFail.
From what I can tell most domains that I was seeing coming through either had no SPF record or had a record that ended in ~a (SoftFail). Given this fact, SpamAssassin wasn't able to make heads-or-tails of most SPF records for spam filtering purposes.
As a side note, SPF seemed hard to implement when a company had several mobile users. So, I got the impression that many companies would just set their SPF to softfail for that reason.
(2) Spammers Can Publish an SPF Record
A spammer can post an SPF record, so SpamAssassin doesn't give a SPF_Pass much weight.
(3) The Rare Exception
The only time I could really see that SPF record evaluation was going to make a solid impact was with domains that had SPF records ending in -a, and the only time that it was going to make a difference was when a spammer was spoofing a domain with a record ending in -a.
I only did this for a few days mind you ... but I just wasn't seeing any spam that met that condition that wouldn't have been caught anyway.
I felt like the load on my server's resources was a bit much given the limited impact the checks were having.

SPF record in DNS

The BC migration instructions here http://adobebcmigration.com/instructions say to add "v=spf1 mx include:worldsecuresystems.com ~all"
My existing SPF record as an Office 365 customer was:
"v=spf1 include:spf.protection.outlook.com -all"
I have changed it to:
"v=spf1 include:spf.protection.outlook.com include:worldsecuresystems.com -all" (note without MX)
What is the MX for in your instructions? Is it required? I don't want to break the Microsoft SPF record by adding it.
Also, I believe the ~ (tilde) is wrong and should be a hyphen?

I'm eager to know this too... anyone have an answer? I hope this thread doesn't get lost in the fray.

Lync 2013 client - part of Office 2013 Pro Plus - unable to edit or remove picture, option is grayed out.

Hi Team,
Lync 2013 client - part of Office 2013 Pro Plus - unable to edit or remove picture, option is grayed out.
Using Exchange 2010 Server and Lync 2010 Server at the back. To the best of my knowledge, this option is only available when using Exchange 2013 rather than Ex 2010.
Can somebody confirm this as I am not 100% sure about it.
Appreciate your help. Thanks
Muhammad Nadeem Ahmed Sr System Support Engineer Premier Systems (Pvt) Ltd T. +9221-2429051 Ext-226 F. +9221-2428777 M. +92300-8262627 Web. www.premier.com.pk

Hi,
The photo precedence in Lync 2013 is high-resolution photo from Exchange 2013 -> Photo from web address -> Active Directory photo. The "Edit or Remove Picture" button is available if you integrate Lync Server 2013 with Exchange 2013.
Since you are Lync server 2010 and Exchange 2010, you can choose the following two options:
The thumbnailPhoto attribute on the user's object in Active Directory Domain Services
A URL configured by the user
More details:
http://blogs.technet.com/b/nexthop/archive/2010/11/22/microsoft-lync-2010-photo-experience.aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Should I use an SPF Record?

Our site allows people to send a request to various subscribers by email. The emails are sent with the FROM being the requesters email address so that our subscribers can reply to them directly.
In the last week we have received a lot of bounced emails from accounts that don't exist on our server. I think setting up an SPF record could help in this regard.
However, given the way our service works, does it make sense to set up an SPF record?
Any thoughts would be appreciated.
Thanks.

Adding an SPF record would help in regards to people using your domain name as the source of spam messages. It wouldn't have any effect on emails you send out under other people's name, though.
If your server sends out a message from [email protected] your SPF record doesn't come into play at all, but under those circumstances you wouldn't get the bounce message anyway - it would go to [email protected] However, your IP address may get flagged as sending bogus email.
In any case I'd add a SPF record. It's not hard to do, and it helps insulate your domain from problems. There's no downside to having it unless users in your domain regularly send mail from other mail servers (which they shouldn't be doing anyway).

How can I edit or remove credit card information from my iCloud account

How can I edit or remove my credit card information from iCloud

Open iTunes and go to the iTunes Store. In the current Mac version, click on your name in the toolbar and choose 'Account details'. Log in. Click 'Edit' next to 'Payment details' and choose 'None' from the options available, or click the type of card you want to use and enter the details. Click 'Done' at bottom right, then again in the first page to leave the account details.

How to edit or remove IE favorites?

Perhaps this is a silly on,
but I really do not know how to edit or remove favorites of the browser?

Niko75,
Welcome to the forum and thanks for posting.
You can edit or delete a favourite by going to options(...)>favourites in the browsers and then select and hold the one you'd like to edit or remove. A popup menu will appear with available options.
Hope this helps,
Kosh
Press the 'Accept As Solution' icon if I have solved your problem, click on the Star Icon below if my advice has helped you!

User can't create, edit, or remove groups and fix I found causes more issues.

Hello!
I have a user that can't create, edit, or remove groups within Lync client 2013. I found a fix online that removing the SIP information will fix the issue. It did but when I do that they have no control over their phone from Lync. So I
added the SIP information back and then the original issue comes back. Is there a way I can have both? We are using the 2013 client but are running Lync 2010 on the server.
Thanks!

I found a fix online that removing the SIP information will fix the issue. It did but when I do that they have no control over their phone from Lync.
Hi,
would you please elaborate about the message above you provided? Did "SIP information" mean user profile?
If yes, it maybe the issue of address book sync. you can try to force Lync to immediately download the address book with the following way:
execute the following command from the Windows Command Prompt run as an administrator;
reg add HKLM\Software\Policies\Microsoft\Office\15.0\Lync /v GalDownloadInitialDelay /t REG_DWORD /d 0 /f
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Condition Record exits (but removed manually)

Dear All
when i am creating SA , some condition types are not being picked up. syastem shows Condition records exits (but removed manually) though problem doesnot fall under any of the reason given in analysis. Not to understand why is this happening
Help plzzz
Regards-
Ram

The message "condition record exists, but has not been set" indicates you that the condition record exists, but has not been set in the document. If pricing was carried out again for the document item, then the condition would be set.
There can be different causes/possibility for this, few of them can be:
The condition was deleted manually in the item condition screen.
The condition record was created later. Please note that order processing and pricing have buffer mechanisms. This means that a newly added condition record might only be found after order processing have been left completely and then started again.
When an item was added, the condition record was accessed with key fields other than change time. This could lead to different results in the requirements check at the time of adding and the change time. This can occur when modifications are made.
In billing (or when copying orders): Certain condition types were not determined in the source document (this is usually controlled by the pricing requirements). When creating the document, the document flow (TVCPF, TVCPA) is processed using a pricing type that does not redetermine these condition types, although they are supposed to be called via the requirements."
Note: that the condition type is determined just in the moment when the billing item is created. And it then that the user exit fills the field. When you save the billing document, pricing is called. Please ensure that you have any user exits switched off and then test this issue again.
Also, refer following SAP Notes
Notes 24832 Pricing rules / TVC
Notes 130416 Requirements in the condition preliminary st
Notes 27636 Message: Condition exists (removed manually)
Notes 859876 Condition is missing: Message VE 108 or VE 008
Hopefully this would assist you in your requirement.
Thanks & Regards
JP

Can you edit or remove from reading list in Safari?

Can you edit or remove from reading list in Safari?

Yes, swipe from right to left across the title of the reading list item and then touch the red Delete which appears.

Creating SPF records

Having run a few tests on our Server, on of the errors that has come up is that we don't have any SPF records.
Doing a search sends me to the following site, but it always comes up with the error - System Maintenance in progress. Please try again later.
microsoft.com/mscorp/safety/content/technologies/senderid/wizard/
Having looked at some other sites, I come up with different answers.
Here is my example, our website is hosted by another company, but we run our own mail server. I have used the following examples
domain - mydomain.com
mail server ip - 1.2.3.4
One wizard come up with the following to add to my DNS
mydomain.com. IN TXT "v=spf1 ip4:1.2.3.4"
Another wizard comes up with the following
"v=spf1 ip4:1.2.3.4 ?all"
Another wizard comes up with the following
"v=spf1 ip4:1.2.3.4 -all"
Any advice appreciated.
Trevor

Hi
No ones mentioned this that I;ve seen. But the SPF settings get applied to the domain at Nameserver level, so not on the local server, but wherever is configured that
www.mydomain.com - goes to 10.20.30.40 and remote.mydomain.com goes to 1.2.3.4 and mail.mydomain.com go to 1.2.3.4 etc
On the name server you set up a new TXT for .mydomain.com
the values need to have
v=spf1 - to show this is the SPF settings
I would then add the IP's and Domains of any PC authorised to send emails on your behalf
i.e. +ip4:1.2.3.4 +a:mail.mydomain.com +a:remote.mydomain.com - This covers your server doing email directly from it... some SPF servers I've found look for the a record and not IP when tracing back (usually pain ones, so never hurts to add as resolves
to same place)
If your website hosted elsewhere has an email form on it you'll need to authorise your webserver to send on your behalf as it will most likely send from a @mydomain.com email address (your own server could class it as spam if not included)
so +ip4:x.x.x.x(webserver IP) +a:www.mydomain.com
As for the all bit
-all is best - means no one else can pretend to be you. I;ve not used ?all, but due to the experience I'm about to explain it could be useful (saves having to use ~all which makes spf pointless)
If you use -all SPF checkers will only allow emails to come from authorised senders. This leads to a problem with people they email without things set up right... had a few problems. A clients customer, had a spam checker that was offsite, that forwards
the email on to the server. so email goes from SenderA to SpamCheckerB. SpamCheckerB scans the email and then forwards on to mailserverC
MailserverC is also set up to check for spam including SPF..... problems is the email has been 'officially' sent from SpamcheckerB and not SenderA.... thus gets rejected by SPF
If senderA doesn;t use SPF it all goes through fine, or if SPF set to ~all goes through fine
Obviously this is a bad set up at the customers end, but if your client or yourself can not send to certain customers (no matter how misconfigured they are, and it being their fault) has a knock on to the business
So please be aware of that if you use -all which is obviously best. Not sure what ?all would do in this case...
so my setting for your SPF would be
v=spf1 +ip4:1.2.3.4 +a:mail.mydomain.com +a:remote.mydomain.com +ip4:x.x.x.x(webserver IP) +a:www.mydomain.com -all
Hope this helps and gives you some trouble shooting ideas in advance

Captivate 5 freezes up any time I try to record, edit, or import audio

I'm using Captivate 5 to create a CBT. When I try to record, edit, or import audio to the slide the program just freezes. When I end the program through my computer's task manager, it says that Captivate is waiting for a response from me. I can not click on anything after I select Audio > Record > Slide. After I reopen the Captivate I can access the Audio Settings with no problem however. Why is Captivate doing this and how can I fix it?

OK. My next guess would be that there is some corrupted element in your project that is preventing compiling from successfully completing.
Next thing to try is use a process of elimination to locate the offending object.
First try copying and pasting all slides from your problem project into a new blank project. This will rename all objects in all slides and strip out any Advanced Actions, but if your issue is due to either of those, then it should immediately be able to compile.
If that doesn't work, try hiding all slides and just unhide them one at a time to see if it will compile. If you go through your project a few slides at a time, you may eventually find the offending slide and then whittle it down to the offending object.

After adding SPF records for Hybrid Development some external mails bounced back with error SPF Unauthorized mail is prohibited.

Added v=spf1 include:spf.protection.outlook.com -all and the txt token for the Exchange 2013 hybrid configuration, now some mails bounced back with the error "SPF Unauthorized mail is prohibited". What could be the cause? Should I customized
the SPF record but it is not mentioned in the procedures for Hybrid configuration to do that.

Hi,
Would you like to mark Ed's reply as an answer so that others can find the solution easily.
Have a nice day : )
Thanks
Mavis
Mavis Huang
TechNet Community Support

SPF Record edit to remove worldsecuresystems as an mx:?

Similar Messages

Maybe you are looking for