为什么此 SPF 记录失败?

Why does this SPF record fail?

我管理两个具有相似 spf txt dns 记录的域:

SPF 记录包含来自父域的数据include:spf.tntcode.com 但是上面两个域好像配置一样,为什么一个失败?

SPF record lookup and validation for: ffiles.com

SPF records are published in DNS as TXT records.

The TXT records found for your domain are: google-site-verification=5j4oHqhf_H5kXl_ciEX9OZISFoexrz9N_5c0I0Q1jw8 v=spf1 +a include:spf.tntcode.com +mx -all

Checking to see if there is a valid SPF record.

Found v=spf1 record for ffiles.com: v=spf1 +a include:spf.tntcode.com +mx -all

evaluating... SPF record passed validation test with pySPF (Python SPF library)!

...

SPF record lookup and validation for: apkfiles.com SPF records are published in DNS as TXT records. The TXT records found for your domain are: v=spf1 +a include:spf.tntcode.com +mx -all

Checking to see if there is a valid SPF record.

Found v=spf1 record for apkfiles.com: v=spf1 +a include:spf.tntcode.com +mx -all

evaluating... Results - record processed without error.

The result of the test (this should be the default result of your record) was, fail . The explanation returned was, SPF fail - not authorized Return to SPF checking tool (clears form) Use the back button on your browser to return to the SPF checking tool without clearing the form.

你确定你测试正确吗?我了解到您正在使用 Scott Kitterman's SPF tester。您是否为两者使用了相同的发件人地址?我使用 IPs/names 获得了两者的通行证 我查找了具有这些配置的域:

ffiles.com:

apkfiles.com:

这两个结果都会正确检索到 SPF 记录,并且两个检查都通过了。

apkfiles.com的SPF记录的末尾好像多了一个space。

也许这就是 kitterman.com 处的验证器在其中一条记录上失败的原因,因为除了额外的 space 之外,这两条记录是相同的。

根据 SPF 的规范,末尾的额外 spaces 不是错误,但可能是某些 SPF 的实现由于额外的 space 而失败。

我刚刚在另一个 SPF 测试仪 (http://mxtoolbox.com/SuperTool.aspx) 上测试了两个域,两个域都成功了