SPF¼¼ÊõdzÎö

ʲôÊÇSPF¼Ç¼£¿

ÕâÀïµÄSPFÊÇÖ¸Sender Policy Framework¡£·­Òë¹ýÀ´¾ÍÊÇ·¢ÐÅÕß²ßÂԼܹ¹£¬±È½ÏÞÖ¿Ú£¬Í¨³£¶¼Ö±½Ó³ÆΪSPF¡£ÔÚÓòÃû¹ÜÀíϵͳÖжÔÓòÃû×öÒ»ÌõÒÔSPF¸ñʽΪ׼µÄtxt¼Ç¼¼´ÎªSPF¼Ç¼¡£

SPF¼Ç¼ÓÐʲôÓã¿

SPFÊÇΪÁË·À·¶À¬»øÓʼþ¶øÌá³öÀ´µÄÒ»ÖÖDNS¼Ç¼ÀàÐÍ£¬ËüÊÇÒ»ÖÖTXTÀàÐ͵ļǼ£¬ËüÓÃÓڵǼÇij¸öÓòÃûÓµÓеÄÓÃÀ´Íâ·¢ÓʼþµÄËùÓÐIPµØÖ·¡£ÀýÈç:

dig TXT domain.com

domain.com. 27970 IN TXT "v=spf1 ip4:218.16.118.186 -all"

°´ÕÕSPFµÄ¸ñʽÔÚDNS¼Ç¼ÖÐÔö¼ÓÒ»ÌõTXTÀàÐ͵ļǼ£¬½«Ìá¸ß¸ÃÓòÃûµÄÐÅÓþ¶È£¬Í¬Ê±¿ÉÒÔ·ÀÖ¹À¬»øÓʼþαÔì¸ÃÓòµÄ·¢¼þÈË·¢ËÍÀ¬»øÓʼþ¡£

SPFÊǸúDNSÏà¹ØµÄÒ»Ïî¼¼Êõ£¬ËüµÄÄÚÈÝдÔÚDNSµÄtxtÀàÐ͵ļǼÀïÃæ¡£mx¼Ç¼µÄ×÷ÓÃÊǸø¼ÄÐÅÕßÖ¸Ã÷ij¸öÓòÃûµÄÓʼþ·þÎñÆ÷ÓÐÄÄЩ¡£SPFµÄ×÷ÓøúmxÏà·´£¬ËüÏòÊÕÐÅÕß±íÃ÷£¬ÄÄЩÓʼþ·þÎñÆ÷ÊǾ­¹ýij¸öÓòÃûÈϿɻᷢËÍÓʼþµÄ¡£

Óɶ¨Òå¿ÉÒÔ¿´³ö£¬SPFµÄ×÷ÓÃÖ÷ÒªÊÇ·´À¬»øÓʼþ£¬Ö÷ÒªÕë¶ÔÄÇЩ·¢ÐÅÈËαÔìÓòÃûµÄÀ¬»øÓʼþ¡£

ÈçºÎ²éѯSPF¼Ç¼£¿

µ±Ç°Êг¡ÉϺܶàÓʼþϵͳºÍ¹©Ó¦É̶¼ÒѾ­¿ªÊ¼Ö§³ÖSPF£¬±ÈÈç163.com£¬ÄÇô¸ÃÈçºÎµÃµ½163.comµÄSPFÖµÄØ£¿ÔÚCMD»·¾³ÖУ¬¼üÈ룺

nslookup

set type=txt

163.com

¾Í»áµÃµ½ÒÔϵĽá¹û£º

163.com text =

"v=spf1 ip4:220.181.12.0/22 ip4:202.108.9.128/25 ip4:202.108.5.0/24 ~all"

163.com nameserver = ns3.nease.net

163.com nameserver = ns.nease.net

ns.nease.net internet address = 202.106.185.75

ns3.nease.net internet address = 220.181.28.3

ÆäÖУº"v=spf1 ip4:220.181.12.0/22 ip4:202.108.9.128/25 ip4:202.108.5.0/24 ~all"¾ÍÊÇ163.comµÄSPFÖµ¡£
Õâ¸öÊý¾ÝÖÐ˵Ã÷ÁË163.comÓÐЧºÏ·¨·þÎñÆ÷¶¼ÓÐÄÄЩ£¡

ÈçºÎÉèÖÃSPF¼Ç¼£¿

½øÈëÓòÃû½âÎö´´½¨Ò»ÌõTXT¼Ç¼ÌîдÕýÈ·µÄSPFÊý¾Ý¾Í¿ÉÒÔÉúЧÁË¡£

¸ñʽÈçÏ£º

v=spf1 [[pre] type [ext] ] ... [mod]

ÿ¸ö²ÎÊýµÄº¬ÒåÈçϱíËùʾ£º ²ÎÊý ÃèÊö

v=spf1 SPF µÄ°æ±¾¡£Èç¹ûʹÓà Sender ID µÄ»°£¬Õâ¸ö×ֶξÍÓ¦¸ÃÊÇ v=spf2

pre ¶¨ÒåÆ¥ÅäʱµÄ·µ»ØÖµ¡£

¿ÉÄܵķµ»ØÖµ°üÀ¨£º ·µ»ØÖµ ÃèÊö

+ ȱʡֵ¡£ÔÚ²âÊÔÍê³ÉµÄʱºò±íʾͨ¹ý¡£

- ±íʾ²âÊÔʧ°Ü¡£Õâ¸öֵͨ³£ÊÇ -all£¬±íʾûÓÐÆäËûÈκÎÆ¥Åä·¢Éú¡£

~ ±íʾÈíʧ°Ü£¬Í¨³£±íʾ²âÊÔûÓÐÍê³É¡£

? ±íʾ²»Öÿɷñ¡£Õâ¸öֵҲͨ³£ÔÚ²âÊÔûÓÐÍê³ÉµÄʱºòʹÓá£

 

type ¶¨ÒåʹÓõÄÈ·ÈϲâÊÔµÄÀàÐÍ¡£

¿ÉÄܵÄÖµ°üÀ¨£º ºòÑ¡Öµ ÃèÊö

include °üº¬Ò»¸ö¸ø¶¨µÄÓòÃûµÄ²âÊÔ

ÒÔ include:domain µÄÐÎʽÊéд¡£

all ÖÕÖ¹²âÊÔÐòÁС£

±ÈÈ磬Èç¹ûÑ¡ÏîÊÇ -all£¬ÄÇôµ½´ïÕâÌõ¼Ç¼Ҳ¾ÍÒâζ×ŲâÊÔʧ°ÜÁË¡£µ«ÊÇÈç¹ûÎÞ·¨È·¶¨£¬¿ÉÒÔʹÓÃ"?all"À´±íʾ£¬ÕâÑù£¬²âÊÔ½«±»½ÓÊÜ¡£

ip4 ʹÓà IPv4 ½øÐÐÑéÖ¤¡£

Õâ¸ö¿ÉÒÔÒÔ ip4:ipv4 »ò ip4:ipv4/cidr µÄÐÎʽʹÓ᣽¨ÒéʹÓÃÕâ¸ö²ÎÊý£¬ÒÔ¼õÉÙÓòÃû·þÎñÆ÷µÄ¸ººÉ¡£

ip6 ʹÓà IPv6 ½øÐÐÑéÖ¤¡£

a ʹÓÃÒ»¸öÓòÃû½øÐÐÑéÖ¤¡£

Õ⽫ÒýÆð¶ÔÓòÃû·þÎñÆ÷½øÐÐÒ»´Î A RR ²éѯ¡£

¿ÉÒÔ°´ÕÕ a:domain, a:domain/cidr »ò a/cidr µÄÐÎʽÀ´Ê¹Óá£

mx ʹÓà DNS MX RR ½øÐÐÑéÖ¤¡£

MX RR ¶¨ÒåÁËÊÕÐÅµÄ MTA£¬Õâ¿ÉÄܺͷ¢ÐÅµÄ MTA ÊDz»Í¬µÄ£¬ÕâÖÖÇé¿ö»ùÓÚ mx µÄ²âÊÔ½«»áʧ°Ü¡£

¿ÉÒÔÓà mx:domain, mx:domain/cidr »ò mx/cidr ÕâЩÐÎʽ½øÐÐ mx ÑéÖ¤¡£

ptr ʹÓÃÓòÃû·þÎñÆ÷µÄ PTR RR ½øÐÐÑéÖ¤¡£

Õâʱ£¬SPF ʹÓà PTR RR ºÍ·´Ïòͼ½øÐвéѯ¡£Èç¹û·µ»ØµÄÖ÷»úÃûλÓÚͬһ¸öÓòÃûÖ®ÄÚ£¬¾ÍÑé֤ͨ¹ýÁË¡£

Õâ¸ö²ÎÊýµÄд·¨ÊÇ ptr:domain

exist ÑéÖ¤ÓòÃûµÄ´æÔÚÐÔ¡£

¿ÉÒÔд³É exist:domain µÄÐÎʽ¡£

 

ext ¶¨Òå¶Ô type µÄ¿ÉÑ¡À©Õ¹¡£Èç¹ûûÓÐÕâ¸ö×ֶΣ¬ÄÇô½öʹÓõ¥¸ö¼Ç¼½øÐÐÎÊѯ¡£

mod ÕâÊÇ×îºóµÄÀàÐÍָʾ£¬×÷Ϊ¼Ç¼µÄÒ»¸öÐÞÕýÖµ¡£

ÐÞÕýÖµ ÃèÊö

redirect Öض¨Ïò²éѯ£¬Ê¹Óøø³öµÄÓòÃûµÄ SPF ¼Ç¼¡£

ÒÔ redirect=domain µÄ·½Ê½Ê¹Óá£

exp ÕâÌõ¼Ç¼±ØÐëÊÇ×îºóÒ»Ìõ£¬ÔÊÐí¸ø³öÒ»Ìõ¶¨ÖƵÄʧ°ÜÏûÏ¢¡£

 

IN TXT "v=spf1 mx -all exp=getlost.example.com"

getlost IN TXT "You are not authorized to send mail for the domain"

 

ÔÚÎÒ¹«Ë¾¹ºÂòÓòÃû£¬¸üÓжÀ¼ÒÉè¼ÆµÄµ¼º½Ê½Éè¼ÆSPF¼Ç¼¹¦ÄÜ£¬ÖúÄú·½±ã¡¢¿ì½Ý¡¢×¼È·µÄ½¨Á¢SPF¼Ç¼

 

 

 

´ØÀËÔÆ © Öйú °æȨËùÓÐ ±¾Õ¾³ÌÐò½çÃæ¡¢Ô´´úÂëÊÜÏà¹Ø·¨Âɱ£»¤£¬Î´¾­ÊÚȨ£¬ÑϽûʹÓñ¸°¸ºÅ£ºÕãICP±¸19026194ºÅ-1
Copyright © 2000-2020 cloud.culang.com . All rights reserved
ÒÔÏÂjsΪ²âÊÔÐÅÏ¢