gmichailidis
Staff
Staff

Description

 

This article describes how to successfully perform SPF check on mails from protected domains, when using a private DNS.

 

Scope

 

All FortiMail

 

Solution

 

When internal mail flow reaches the FortiMail from an authorized public IP address and the FortiMail performs SPF check based on the private DNS server, for the SPF check to be successful:

 

- verify that SPF records are published on the private DNS server OR

- consider using a public DNS server instead

 

Verify if the records are published on the private DNS server, also through the FortiMail CLI.

 

Query the configured private DNS for the SPF TXT records:

 

# execute nslookup name domain.com type txt

 

Compare the previous results, with the results from any public DNS server:

 

# execute nslookup name domain.com type txt server 208.91.112.52