Re: ipv6 and spf

On Wednesday, January 18, 2012 02:27:26 PM Benny Pedersen wrote:
> On Wed, 18 Jan 2012 06:45:54 -0500, Scott Kitterman wrote:
> > I think it's a bug in the tool.
> 
> okay
> 
> > http://kitterman.com/spf/validate.html shows
> > that as a pass.  You're record is redundant though.
> 
> i added the a:... after i posted, will remove it again now
> 
> > junc.org.               43200   IN      TXT     "v=spf1
> > ip4:2.104.223.8/30
> > ip6:2001:470:27:bb3::2 a:xpoint-1-pt.tunnel.tserv24.sto1.ipv6.he.net
> > -all"
> > 
> > The ip6: and a: mechanisms point to the same host, so you should
> > remove one.
> 
> there is one possible griff in that the a: can have more then one ip,
> so its unsafe like ptr :=)

No.  It's not at all unsafe.  The ability of one host to point to multiple IP 
addresses is a feature of DNS and SPF.  The reason it's a concern for PTR is 
it drives additional DNS lookups to validate the PTR.  For an 'a' record it's 
all one lookup.

> > P.S. Openspf.org is still dead, so you'll need to use openspf.net
> > instead.
> 
> dead in not possible to change dns virtualhost ?, is it diff owners ?

Dead as in the host is non-functional and the operator of it isn't immediately 
reachable (I'm sure we'll get it restored eventually).  In the meantime, 
openspf.net serves the same content and there are tool updates being worked on 
to point to .net instead of .org.

> will the wizard page come back ?

The wizard was removed because it was doing more harm than good due to making 
poor recommendations.  If someone writes a new wizard that's useful,  then 
we'll put one up, but so far we don't have one.

Scott K