SPF - wouldn't a be better than mx?


#1

I was looking at the SPF record for my domain and I realise you use v-spf1 mx -all

However as mx requires at least two lookups (one to get the mx hostnames and one to get the ip address), wouldn’t a better record be v-spf1 a -all ? After all that would be one lookup to get the A record (possibly two if there is an IPv6 address (AAAA record) as well,

Tim


#2

The A record and the MX record might have different values…


#3

Surely v-spf1 ip4:xxx.yyy.zzz.www -all would be better? It would incur no further DNS lookup.


#4

Is this a hypothetical concern or have you seen a problem with having an additional DNS lookup?


#5

It’s hypothetical, and to be honest I forgot about dual stack considerations. Certainly in those situations MX is better as it will pick up on both A and AAAA records.


closed #6

This topic was automatically closed after 61 days. New replies are no longer allowed.