#5029 SPF malformed when using redirect

[Chris Macneill]

Hi,

I have come across a problem when creating/modifying DNS SPF records using the "redirect" option. Webmin appends the "all" string with selected prefix to the end of all SPF records. However, some email servers don't seem to handle this and reject emails with "rejected due to SPF policy" error when "-all" is appended to an SPF record with "redirect".

If the SPF value is modified to "v=spf1 redirect=somedomain.com" without the "all" suffix by editing Bind9 config files directly, the problem goes away. I'm not sure if this is an error in Webmin that is creating non-compliant SPF records or some failure/bug in the offending mail server. The owners of the offending mailserver (xtra.co.nz) are not responding to emails to Postmaster account.

Regards

Chris Macneill
CMIT Consulting (www.cmit.nz)

[Jamie Cameron]

Thanks for pointing this out - I wil remove the all tag when using redirect in future.