John skrev den 2014-12-07 18:28:
And just to make life a little more interesting, the Bind9 log show
an entry "general: warning: zone klam.ca/IN/external: 'klam.ca' found
SPF/TXT record but no SPF/SPF record found, add matching type SPF
recor..."!
what spf client software are you using ?
atleast lastest Mail::SPF perl module does text SPF dns record, and have
failback to TXT if not found, so dns servers that does not support SPF
rr will spend more cpu usage to only support TXT, since clients then
need to do 2 queries
on the other side it would be a fault only do SPF and not TXT checking
on top of that SenderID is not SPF/TXT that is depricated, but old
software still dont care on that
opendmarc 1.3.0 does use senderid if libspf2 is linked
and i see pypolicyd-spf does not always agree with results from libspf2,
hmm