Spf Records Prevent "Too Many MX Resource Records" and too many operators / remove duplicate actions

0
votes

we have setup SPF like below (ips changed for demo purposes)

v=spf1 a mx ip4:188.166.200.10 ip4:178.62.229.10 ip6:2a03:b0c0:2:d0::30f:1003 
include:_spf.google.com include:servers.mcsv.net -all

We are receiving a warning "Too Many MX Resource Records" and also it was reported that we have both: ps defined, a, mx and include statements.

Question: what is an optimal SPF record definition where we don't "over do it" ... with the goal to remove duplicate actions in this record

Rationale

  • ip4 an ip6 records are from actual server
  • a records should resolve to the same as ip4 an ip6 (so this is already unnecessary?)
  • mx records should resolve to the same as the google spf include? This part is not clear to me - maybe here we a creating far too many lookups? If I look here then the _spf record resolves to many other ips too in he chain https://mxtoolbox.com/SuperTool.aspx?action=mx%3a_spf.google.com&run=toolpage
1
smtpspf

1 Answers

0
votes

That error is a bit confusing – it doesn't sound like it's about your SPF, but about your MX records.

MX records designate your inbound mail servers, and do not necessarily correspond with the servers that can send for your domain, which is what SPF covers. For example, it's likely your web server can send mail for your domain, but it won't accept mail sent to it.

It does sound like you have too many MX records. Without knowing your domain I can't check that, but you shouldn't have more than about 5.

Aside from that, your SPF looks fine.