domain-name-system – Port25.com SPF测试失败,gmail SPF通过

使用port25.com的漂亮的小工具测试我的SPF记录时发送电子邮件给
[e-mail]我得到以下失败结果：

==========================================================
Details:
==========================================================

HELO hostname:  avantgardeweb.co.uk
Source IP:      2002:2e20:e862::2e20:e862
mail-from:      [e-mail]

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result:        fail (not permitted)
ID(s) verified: smtp.mailfrom=[e-mail]
DNS record(s):
    greenshieldsarchitecture.co.uk. SPF (no records)
    greenshieldsarchitecture.co.uk. 14400 IN TXT "v=spf1 mx a -all"
    greenshieldsarchitecture.co.uk. 14400 IN MX 10 mail.greenshieldsarchitecture.co.uk.
    mail.greenshieldsarchitecture.co.uk. AAAA (no records)
    greenshieldsarchitecture.co.uk. AAAA (no records)

但是,当我实际向gmail帐户发送电子邮件时,它会通过：

Received-SPF: pass (google.com: domain of [e-mail] designates 46.32.232.98 as permitted sender) client-ip=46.32.232.98;
Authentication-Results: mx.google.com;
   spf=pass (google.com: domain of [e-mail] designates 46.32.232.98 as permitted sender)

谁能在这里解决一些问题？

解决方法

您的port25.com测试邮件似乎通过IPv6连接(或IPv6源)到达,因此SPF客户端查找DNS AAAA RR,而不是通常与IPv4源一起使用的A RR.这就是SPF的工作方式( see RFC7208 Section 5.5),但由于你的域缺少AAAA记录,“mx”和“a”机制都没有匹配,SPF评估也没有“-all”.在gmail的情况下,连接是从IPv4地址进行的,因此匹配“mx”或“a”.

如果您使用的是IPv6,只需为mail.greenshieldsarchitecture.co.uk设置AAAA记录即可解决问题.