SPF not working on IspConfig 3

[atjensen11]

I recently reconfigured my system. I no longer use dkimproxy. Instead, I configured amavis-new to perform the DKIM signatures. It was pretty easy to do and removes one hop from email processing. Some reports I read claim that server utilization is much lower using amavis-new rather than dkimproxy as well.

[vlados]

I have the same problem. I cannot use the TXT record.
I added and removed it few times, but it just didnt show in the info:

root@server1:~# dig @localhost txt netlabs.bg

; <<>> DiG 9.6.1-P2 <<>> @localhost txt netlabs.bg
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5344
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;netlabs.bg.                    IN      TXT

;; AUTHORITY SECTION:
netlabs.bg.             86400   IN      SOA     ns1.netlabs.bg. support.netlabs.bg. 2010092002 28800 7200 604800 86400

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Sep 20 11:14:10 2010
;; MSG SIZE  rcvd: 76

root@server1:~#

mysql> select * from dns_rr where type like 'txt';
+-----+------------+-------------+---------------+----------------+----------------+-----------+------+-----------------+------+----------------------
+-----+-------+--------+---------------------+------------+
| id  | sys_userid | sys_groupid | sys_perm_user | sys_perm_group | sys_perm_other | server_id | zone | name            | type | data
| aux | ttl   | active | stamp               | serial     |
+-----+------------+-------------+---------------+----------------+----------------+-----------+------+-----------------+------+----------------------
+-----+-------+--------+---------------------+------------+
| 124 |          1 |           0 | riud          | riud           |                |         1 |    1 | mail.netlabs.bg | TXT  | v=spf1 a mx ptr ~all
|   0 | 86400 | Y      | 2010-09-20 10:59:27 | 2010092001 |
| 123 |          1 |           0 | riud          | riud           |                |         1 |    1 | netlabs.bg      | TXT  | v=spf1 a mx ptr ~all
|   0 | 86400 | Y      | 2010-09-20 10:59:02 | 2010092001 |
+-----+------------+-------------+---------------+----------------+----------------+-----------+------+-----------------+------+----------------------
+-----+-------+--------+---------------------+------------+
2 rows in set (0.00 sec)

Using ISPConfig 3.0.2.2

[falko]

You must use dots at the end of the hostnames, e.g.

mail.netlabs.bg.
netlabs.bg.

Also, please put the TXT record in quotation marks, e.g.

"v=spf1 a mx ptr ~all"

[defconjuan]

FALKO - quick question:

When I use quotes in the ISPConfig > DNS > Zones page, my /etc/bind/pri.domain.tld file TXT entry looks like this:

""v=spf1 +a +mx ~all""

(note the double quotes) When I remove them from the ISPConfig form, then it looks like:

"v=spf1 +a +mx ~all"

Your post and the ISPConfig 3 manual (as of May 2011) both say to use quotes when defining TXT records in ISPConfig. This seems wrong no?

[defconjuan]

For example, this is my default template:

[ZONE]
origin={DOMAIN}.
ns={NS1}.
mbox={EMAIL}.
refresh=28800
retry=7200
expire=604800
minimum=86400
ttl=86400

[DNS_RECORDS]
A|{DOMAIN}.|{IP}|0|1800
A|*|{IP}|0|1800
A|mail|{IP}|0|1800
A|www|{IP}|0|1800

CNAME|ftp|{DOMAIN}.|0|1800
CNAME|phpmyadmin|{DOMAIN}.|0|1800
CNAME|webmail|{DOMAIN}.|0|1800
NS|{DOMAIN}.|{NS1}.|0|1800
NS|{DOMAIN}.|{NS2}.|0|1800
MX|{DOMAIN}.|mail.{DOMAIN}.|10|1800
TXT|{DOMAIN}.|v=spf1 +a +mx ~all|0|1800

This returns a glowing report from http://intodns.com/domain.tld

The subtle variations (e.g. using A instead of CNAME for the www and mail records).

[Davide]

Originally Posted by defconjuan

FALKO - quick question:

When I use quotes in the ISPConfig > DNS > Zones page, my /etc/bind/pri.domain.tld file TXT entry looks like this:

""v=spf1 +a +mx ~all""

(note the double quotes) When I remove them from the ISPConfig form, then it looks like:

"v=spf1 +a +mx ~all"

Your post and the ISPConfig 3 manual (as of May 2011) both say to use quotes when defining TXT records in ISPConfig. This seems wrong no?

I know this is an 1.5 years old thread, but I'm having the same problem. Double quotes.

Is this correct at all?

[till]

SPF records have to be added without quotes as ispconfig adds the quots automatically. I just checked this in the sources of the manual and the manual version that gets released for ispconfig 3.0.5 in january says to add them without quotes as well.

[Davide]

I've updated all SPF TXT in dns_rr with the following sql

update dns_rr set data = replace (data,'"','') where type="TXT" and data like '"%"';
Query OK, 212 rows affected (0.01 sec)
Rows matched: 212  Changed: 212  Warnings: 0

How can I tigger ispconfig to rewrite all zone files?

[till]

See tools > resync