SPF not verified - mailgun

I have some email service additional to mailgun that automatically sets SPF record in DNS. There is option to add extra host to this SPF record however it does not make domain verified...
My SPF record looks like this:
v=spf1 +a +mx +ip4:11.11.11.11 +include:mailgun.org ~all
I've tested it with http://www.mail-tester.com/spf-dkim-check and SPF record exists. However in mailgun manager when I click "Check DNS records now" it complains about SPF (DKIM / CNAME are OK). What can I do? I can't edit SPF record manually because it is auto-genarated by other email service.

Based on what you're saying, it sounds like your SPF is OK. Send an email from Mailgun using this Mail tester, it will tell you if the SPF Passes. I'm wondering if MailGun has an issues with the "+" qualifier, it's the default and is not needed.

Your primary spf record should end with -all. ~all is used for testing (SoftFail).
The ip address with the most mail traffic should be in your first spf record.
-all (Fail) for production systems
v=spf1 a mx ip4:11.11.11.11 include:mailgun.org -all
optimized for ip 11.11.11.11 reduced dns queries
v=spf1 ip4:11.11.11.11 a mx include:mailgun.org -all
Tools for check your mail server configuration (SPF/DKIM/SpamAssassin/Blacklist)
https://www.mail-tester.com
https://www.unlocktheinbox.com
http://emailaudit.com
http://dkimvalidator.com

Related

SPF record definition within Route 53

I've got an application that is hosted on aws, but mail is sent via google. I'm using Route 53 for my DNS. I'm trying to figure out what to use for an SPF record within Route 53 to enhance the deliverability of my emails.
Within the SPF record, I understand that I need to specify the mail server in either domain, ip4, or ip6 format.
Within the SPF record, would I use the ip address of my load balancer on aws or would I specify my domain name? Alternatively, should I indicate a domain name or IP address that represents GSUITE's servers?
I'm very confused. Thanks for your help!!
You need to follow this guide which gives you the SPF record to use for your Google email service. Since your load balancer and AWS servers are not involved in your email service, they would not be included in the SPF record.

how to redirect DNS to a domain and emails

I have a domain that registered on company that just provide just domains, I made workspace google emails on that domain, and i have web host in small company.
I want buy web hosting on HostGator and redirect the domain and google emails there.
I know how to redirect domain to the HostGator DNS, but for the emails I don't know how
how can redirect the emails, will the emails stop working and for how long?
Thank you
Domain names (website etc) work with A and CNAME records.
Emails work with MX records.
So, if your google MX records are set and working, all you need is to add A / CNAME records to get the website to work.
This will not cause any downtime at all.
You need to set MX records of your Google Mail server at your DNS zone. Because mail server uses MX records.
Thank you,
Harsh Sheth

Adding AWS SSL to an external DNS

I have bought a domain from an external resource and I tried to add the AWS SSL certificate into DNS as a CNAME record
Although the AWS Certivicate Name starts with a ' _ ' character, when I tried to add it in DNS it gives me an error as
"Server name can be use letters hypens and dots only"
I do not have any experience regarding this and want to know if I'm doing anything wrong in DNS Validation for AWS SSL Certificate.
There are couple of options to solve this:
1. Use Email verification method to get the certificate, if you haven't enabled Privacy protection on the registrar, you'll get a verification email from AWS ACM and you can verify a certificate or ACM also sends verification emails to 5 different email addresses such as:
administrator#your_domain_name
hostmaster#your_domain_name
postmaster#your_domain_name
webmaster#your_domain_name
admin#your_domain_name
Use Route53, Create a HostedZone for your domain in Route53 and use the name servers Route53 provided and use it on your current registrar.
Create and transfer all the records to Route53 , you don't need to transfer the domain, just use Route53 nameservers to your current registrar.

aws email server setup same domain

1.I have a domain name in namecheap.com.
2.I have servers, including a web server, and an email server on amazon.
3.My web server and email server have 2 different IPs.
4.But I only have one domain, lets say www.abcde.com.
5.I was able to setup the NS, and the "A" correctly in away that www.abcde.com points to my web server.
When visitors go to url www.abcde.com I want them to go to the web server.
How do I setup an email server so that email that goes to admin#abcde.com points to the email server?
You need to add an 'MX' DNS record pointing at a CNAME record which points the mail server's IP. Also, it needs a number indicating the 'preferred' server. If you only have one, then this number doesn't matter.
So, you want an MX record like:
MX mail.example.com 10
And a CNAME record like:
CNAME mail.example.com which points to x.x.x.x

Google Cloud DNS with mailgun

I have one domain with Google Cloud DNS. My SPF record doesn't work with mailgun domain verification
v=spf1 include:spf.protection.outlook.com include:_spf.google.com include:mailgun.org ~all
anyone facing the same issue?
thanks
In case anyone need answer here's how i fixed it
via Google cloud control panel i added opening and closing quote to TXT spf record
"v=spf1 include:spf.protection.outlook.com include:_spf.google.com include:mailgun.org ~all"
thanks