Windows 2008 r2 dns spf

If you look in my previous DIG results, the record is 20 seconds. If a DNS server is configured to cache the record longer than it's TTL, that may explain that, or even if caching is fully disabled, which will generate a fresh request each time, and possibly on one of the request, it's querying the lame NS1 nameserver. There are pros and cons regarding this, but the basis of what's going on is the domain's records are misconfigured, which is causing the issues you're seeing, which is causing inconsistent results.

If the domain records are properly configured, all DNS servers will properly resolve it. Office Office Exchange Server. Not an IT pro? Windows Server TechCenter. Sign in. United States English. Ask a question. Quick access. Search related threads. Remove From My Forums. Answered by:. Archived Forums. Directory Services. Sign in to vote. Sunday, April 15, AM. Late Edit: What the report is indicating is there's a missing glue at child: ns1.

As you can see in the report: No address found for ns1. Done testing host ns1. One of our partners was not able to send mails to any our staff. Our mailserver denied these mails because of incorrect SPF records.

The SPF records of the sending domain were correct, though they have a lot of "include:" tags and a long list of allowed hosts included. But our internal DNS server did not answer to the request correctly, instead it says "entry not found". A crosscheck against Google public DNS showed correct answers, though. So I did some additional reseach and found an technet wiki article and corresponding KB article describing this problem.

Installing the mentioned hotfix and reboot of our DNS servers solved the problem. Our server is fully patched. Why was this hotfix not included in any regular patch update? Because it's a hotfix and as the article will say "intended to fix a specific issue". Windows Server TechCenter. Sign in. United States English. Ask a question. Quick access. Search related threads. Remove From My Forums. Answered by:. Archived Forums. Network Infrastructure Servers. Sign in to vote. When I go to the zone file the TXT record exists, but the data for the record was removed.

When I edit the zone file directly, save it, and restart the DNS server service. Marked As Answer. MS DNS does not require quotes. Bruce Barnes.

Are you sure you want to ban this user? Cancel Ban User. Are you sure you want to ban this IP Address? Are you sure you want to delete this item? Cancel Delete. Hi Bruce,. Thanks for the reply. All the domains on my mail server have their outgoing mail sent through IP address