Description
This article describes how to successfully perform SPF check on mails from protected domains, when using a private DNS.
Scope
All FortiMail
Solution
When internal mail flow reaches the FortiMail from an authorized public IP address and the FortiMail performs SPF check based on the private DNS server, for the SPF check to be successful:
- verify that SPF records are published on the private DNS server OR
- consider using a public DNS server instead
Verify if the records are published on the private DNS server, also through the FortiMail CLI.
Query the configured private DNS for the SPF TXT records:
# execute nslookup name domain.com type txt
Compare the previous results, with the results from any public DNS server:
# execute nslookup name domain.com type txt server 208.91.112.52
