none
SPF record optimisation for office 365.

    Question

  • Hi folks  need some assistance optimizing my <g class="gr_ gr_12 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="12" id="12">spf</g>  record as its failing due to too many DNS lookups

    this is the current record.

    v=spf1 a mx ptr include:servers.mcsv.net include:spf.mandrillapp.com include:outlook.com include:spf.messaging.microsoft.com include:spf.messagelabs.com -all

    And yes <g class="gr_ gr_18 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="18" id="18">i</g> know, a <g class="gr_ gr_21 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="21" id="21">mx</g> and ptr shouldn't be there.

    The problem is outlook.com and messaging.microsoft.com. are there more direct entries <g class="gr_ gr_30 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="30" id="30">i</g>  could use, exmaple _spf-b etc... OR are these two even required if all the company does is use office 365 for Archiving, no mail is sending out through Office365.


    • Edited by Raygunz Wednesday, May 4, 2016 7:33 PM
    Wednesday, May 4, 2016 6:58 PM

Answers

  • Hi folks  need some assistance optimizing my <g class="gr_ gr_12 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="12" id="12">spf</g>  record as its failing due to too many DNS lookups

    this is the current record.

    v=spf1 a mx ptr include:servers.mcsv.net include:spf.mandrillapp.com include:outlook.com include:spf.messaging.microsoft.com include:spf.messagelabs.com -all

    And yes <g class="gr_ gr_18 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="18" id="18">i</g> know, a <g class="gr_ gr_21 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="21" id="21">mx</g> and ptr shouldn't be there.

    The problem is outlook.com and messaging.microsoft.com. are there more direct entries <g class="gr_ gr_30 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="30" id="30">i</g>  could use, exmaple _spf-b etc... OR are these two even required if all the company does is use office 365 for Archiving, no mail is sending out through Office365.



    If you aren't sending mail out through Office 365, you can remove those entries.

    Blog:    Twitter:   

    • Marked as answer by Raygunz Thursday, May 5, 2016 2:12 PM
    Wednesday, May 4, 2016 8:48 PM

All replies

  • Hi folks  need some assistance optimizing my <g class="gr_ gr_12 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="12" id="12">spf</g>  record as its failing due to too many DNS lookups

    this is the current record.

    v=spf1 a mx ptr include:servers.mcsv.net include:spf.mandrillapp.com include:outlook.com include:spf.messaging.microsoft.com include:spf.messagelabs.com -all

    And yes <g class="gr_ gr_18 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="18" id="18">i</g> know, a <g class="gr_ gr_21 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="21" id="21">mx</g> and ptr shouldn't be there.

    The problem is outlook.com and messaging.microsoft.com. are there more direct entries <g class="gr_ gr_30 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="30" id="30">i</g>  could use, exmaple _spf-b etc... OR are these two even required if all the company does is use office 365 for Archiving, no mail is sending out through Office365.



    If you aren't sending mail out through Office 365, you can remove those entries.

    Blog:    Twitter:   

    • Marked as answer by Raygunz Thursday, May 5, 2016 2:12 PM
    Wednesday, May 4, 2016 8:48 PM
  • Hi,

    According to your description, I understand that the issue is related to office 365. As this forum focuses on some general discussion about Exchange.

    I suggest we ask a question in office 365 forum:

    https://community.office365.com/en-us/f

    Regards,

    David

    Thursday, May 5, 2016 5:10 AM
    Moderator
  • Do you have a valid business reason to keep all these? As Andy suggested, if you are not using all the different services to send mail, simply remove the corresponding entries from the SPF.

    If you do need to use all these services, you will have to resort to workarounds due to the DNS lookup limit. The usual workaround is to use a separate (sub)domain For example, you can have @domain.com for your local servers, and @cloud.domain.com for the messages originating from Office 365 or Messagelabs, etc.

    Thursday, May 5, 2016 7:25 AM
  • Another option is to dump the includes ( other then the 365 ones if you are keeping them) and use IPs instead if possible.


    Blog:    Twitter:   

    Thursday, May 5, 2016 10:57 AM