SPF include: too many IP addresses
Posted
by sprezzatura
on Server Fault
See other posts from Server Fault
or by sprezzatura
Published on 2010-04-03T23:17:24Z
Indexed on
2010/04/03
23:23 UTC
Read the original article
Hit count: 323
spf
I've hit a snag with SPF. The SPF record for my domain will contain four or five entries, plus it will contain: include:sgizmo.com
The SPF record for sgizmo.com contains eleven entries! This, plus mine, is way over the maximum ten allowed by the RFC (and probably by most servers). I realize that there has to be a limit in order to prevent DoS attacks. However, in the real world, it is probably not unreasonable for large companies to have many server addresses.
Furthermore, must I know monitor my 'include:' counterparts for changes and additions? Must I check weekly, daily, to insure that some combination of changes doesn't suddenly put me over the top? It doesn't seem to me that SPF is suitable for prime time.
Is there another way to do this?
© Server Fault or respective owner