SPF record validation check
Prerequisites:
None.
Package:
Resource Records.
Executed on:
All nameserver IP addresses.
Check interval:
Every 5 minutes.
Impact on Availability:
None.
Impact on Integrity:
High.
Purpose
The check validates that the SPF text record remains unaltered to its configured values/values.
The SPF resource record check identifies the “v=spf1” rdata field in the TXT record when the check is configured. Sender Policy Framework is used to authenticate which hosts are allowed to send mail on behalf of the domain name.
Event severities and messages
INFO
Records mach.
No detected changes to the TXT (SPF) record/records.
DNSSEC signature validates correctly.*
DNSSEC signature for the TXT record set has passed validation.
ERROR
The record {Resource Record} exists in the domain but not as record type TXT.
No SPF (TXT) record found.
The record {Resource Record} does not exist..
The query received a NXDOMAIN response.
Unrecognised records.
Lists records that should have been included in the query response but weren’t.
Missing records.
Lists records that should have been included in the query response but weren’t.
{DNS IP} responded with RCODE for the record {Resource Record}.
Please see the Generic DNS response code page for further information.
DNSSEC validation failure.*
DNSSEC signature for this resource record has failed validation.
UNKNOWN
{DNS Name/IP} responded with RCODE for the record {Resource Record}.
Please see the Generic DNS response code page for further information.
* Require DNSSEC.