smtp - 如何正确设置 DNS SPF 记录？

Question

我每周都会向订阅者发送电子邮件，结果发现邮件经常进入用户的垃圾邮件文件夹。

我正在使用 Amazon SES 发送这些消息，并根据他们的说明添加了 SPF 记录:http://docs.amazonwebservices.com/ses/latest/DeveloperGuide/SPFSenderIDDKIM.html?r=3917

在查询我的域的 SPF 记录时，我从 http://www.kitterman.com/spf/validate.html 得到以下信息:

SPF record lookup and validation for: mydomain.tld

SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:


SPF records should also be published in DNS as type SPF records.
Type SPF records found for the domain are:


Checking to see if there is a valid SPF record. 

Found v=spf1 record for mydomain.tld: 
v=spf1 include:amazonses.com ?all 

evaluating...
Results - record processed without error.

The result of the test (this should be the default result of your record) was, none . The explanation returned was,

对于我的 CloudFlare DNS 记录，我有:

SPF  mydomain.tld   v=spf1 include:amazonses.com ?all   with automatic TTL
TXT  mydomain.tld   spf2.0/pra include:amazonses.com ?all   with automatic TTL

电子邮件是从“no-reply@mydomain.tld”和“admin@mydomain.tld”发送的。

一些用户报告看到以下消息:“错误地显示为“退回邮件”响应的消息(系统生成的电子邮件，您在发送无法传递的消息后可能会自动收到，例如发送给无效的邮件地址)”

使用我当前的发送解决方案，我无法向电子邮件添加 DKIM。

如何解决这个问题以便为我们的用户改善任何类型的收据问题？

Answer 1

没有有效的 TXT您的域的记录(请注意，测试没有返回任何记录，请参见下面的工作示例)，这是由于 TXT 周围缺少引号引起的您定义的记录，如解释，例如在 Record Types Supported :

Unlike with most other record types, for TXT records the Data field is essentially free-form and may even include spaces. Please note: When entering a string that includes spaces, such as SPF records, you must enclose the string in double quotes; otherwise, individual words will be separately quoted and break up the record into multiple parts.

这是 TXT我们目前成功使用的记录 Amazon SES根据 Authenticating Your Email Address并且(确实不幸的是，他们的文档没有解决引用需求):

"v=spf1 include:amazonses.com ~all"
"spf2.0/pra include:amazonses.com ~all"

因此，这是我们的域对您一直在运行的测试的缩写结果:

SPF record lookup and validation for: [...]

SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:
spf2.0/pra include:amazonses.com ~all 
v=spf1 include:amazonses.com ~all 

[...]

Checking to see if there is a valid SPF record. 

Found v=spf1 record for services.marescom.net: 
v=spf1 include:amazonses.com ~all