Sign up ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

The situation:

  • Domain name:
  • Site hosted by
  • Domain name registrar:
  • Mx Records point to google apps servers
  • created a TXT record at nearlyfreespeech with the following:
    • v=spf1 ip4: ~all
  • Mail is sent either through the gapps web interface, either through the site (which uses ASP)
  • Some mail still gets rejected as spam

I manage my own apache server, so I am not a complete newbie, but I am having trouble understanding DNSes. Specifically, I am not sure I really understand the syntax of SPF.
When I go to the intodns check, I get a few errors still.
I don't really understand what to do. Google search yields a lot of resources, but most of them unclear, often contradicting each other. Is there any place that gives a comprehensive, cohesive view of how servers and DNS work? With a few receipes for most common use cases, that would be perfect.

For the record, here are the errors I get at intoDns:

  • Domain NS records
    • Nameserver records returned by the parent servers are:
      • [''] [TTL=172800]
      • [''] [TTL=172800]
  • NS records from your nameservers
    • NS records got from your nameservers listed at the parent NS are:
      • [''] [TTL=3600]
      • [''] [TTL=3600]
  • Glue for NS records
    • INFO: GLUE was not sent when I asked your nameservers for your NS records.This is ok but you should know that in this case an extra A record lookup is required in order to get the IPs of your NS records. The nameservers without glue are:
    • You can fix this for example by adding A records to your nameservers for the zones listed above.
  • SOA MNAME entry
    • WARNING: SOA MNAME ( is not listed as a primary nameserver at your parent nameserver!
    • Warn SOA Serial Your SOA serial number is: 1323999125. This can be ok if you know what you are doing.
    • Warn SOA REFRESH WARNING: Your SOA REFRESH interval is: 600. That is not so ok
    • Your SOA EXPIRE number is: 86400. That is NOT OK
    • WWW A Record
      • Your A record is: [] []

I know this question is unlikely to serve the community as it is very specific, but I don't know where to turn to, I've been on this for days now. Any pointer would be appreciated.

share|improve this question
found this which is a good resource –  Xananax Dec 17 '11 at 11:56

1 Answer 1

Your SPF include for Google Apps is outdated.

Use the following:


For reference, the record at contains a significant range of Google IP addresses and should cover all cases where Google is sending mail: 300 IN TXT "v=spf1 ip4: ip4: ip4: ip4: ip4: ip4: ip4: ip4: ip4: ip4: ?all"
share|improve this answer
and how would I also add the server which hosts the website? Or is it not needed? If it is, is this notation correct: [ v=spf1 ip4: ~all ] –  Xananax Dec 20 '11 at 13:21
That is valid (you can validate records here: ). You only need to put IP addresses and A records for domains if they are used to send emails. If they are, then list them. –  Eric Brandel Dec 22 '11 at 17:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.