IPv6 SPF Records

eric eric at catastrophe.net
Tue Sep 27 05:23:23 CEST 2005


On Mon, 2005-09-26 at 10:51:33 -0500, eric-list-ipv6-ops at catastrophe.net proclaimed...

> I've noticed some SPF-clueful mail servers are denying mail sent from an
> IPv6 source address. Has anyone else been bumping into this issue if your
> mail servers are v6-enabled? If so, what did you do? Are there any
> guidelines for configuring SPF records for IPv6 netblocks? I've looked in
> the spf documentation, but assume this may be one of those "hidden
> configuration" details. :-) 

Thanks to all of the replies I received off-list (and on-list as well).
Turns out it's not as bad as you may think. Here's my spf record I've
created.

$ host -t txt nxio.us
nxio.us descriptive text "v=spf1 ip4:207.227.243.192/28
ip6:[2001:4830:e5:6::2] ip6:[2001:468:1202:301:20a:5eff:fe21:2f6b]
ip6:[2001:4830:2280::]/48 ip6:[2001:4830:e5:8::2] ip6:[2001:4830:2281::]/48
mx -all"

Seems to be working, thus far. I could send mail to some spf-enabled hosts
that I couldn't send to before.

thanks.


More information about the ipv6-ops mailing list