-all in SPF option?

[edge]

Anyone here who might know how to get the "-all" option set within the ISPconfig SPF record option?

The closest that I can get to a "-all" is "~all", and this does make a big difference

[till]

First, sorry for the late reply. I had to have a look at the ISPConfig sources first

There is no easy way to change this. If you have a look at the file /root/ispconfig/scripts/lib/ispconfig_bind.lib.php you might change it around line 258

[edge]

Thanks till,

Maybe it's a nice feature for the next version of ISPconfig?

Something like some preset SPF records option, where the admin can make a selection of some preset SPF's?

option1: Allow domain's MXes to send mail for the domain, prohibit all others.
v=spf1 mx -all

option2: The domain sends no mail at all.
v=spf1 -all

option3: The domain owner thinks that SPF is useless and/or doesn't care.
v=spf1 +all

etc...
etc..

[till]

Thats a nice idea. I moved this thread to the feature request forum.

[wr19026]

Originally Posted by till

Thats a nice idea. I moved this thread to the feature request forum.

As I can't get SPF records to work for domains I hosted prior to ISPConfig supporting this, would it be possible to make this available for existing domains as well?

[falko]

You can't create SPF records for domains (with a recent ISPConfig version) that you created with an old ISPConfig version that didn't support SPF?

[koffiejunkie]

To add to the feature request part of this thread, it would be really nice if there was an option to just enter the spf record manually, instead of using the web form. The reason for this is to make migrations easier. It's far quicker and less error-prone to copy and paste from old zone files than to have to interpret the current ones and fill out the form. Especially if users are doing it themselves.

[tensor]

Currently there is a code to check for all_.


if($spfrecord['all_'] == 1){
$spf .= '~all';
} else {
$spf .= '?all';
}

Is it possible to add 2 to mean "-all" and 3 to mean "+all"?

[k3n]

don't create the spf entry with ispconfig, then add your spf entry
to your bind pri.example.com files:
;;;; MAKE MANUAL ENTRIES BELOW THIS LINE! ;;;;
example.com. TXT "v=spf1 a -all"