SPF record for my domain is not being detected

Nilesh Trivedi asked:

I have a domain (qplum.co) set up at NameCheap. I am trying to set a TXT record for setting up SPF for Mandrill but for some reason, this record is not being detected at all by any of the tools.

This is how my DNS settings look like in NameCheap’s control panel (@ means none, or the bare domain “qplum.co”):

@ CNAME qplumLB-804948472.us-east-1.elb.amazonaws.com.

@ TXT v=spf1 include:spf.mandrillapp.com mx ~all

mandrill._domainkey TXT v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb--trimmedAB;

None of the online SPF tools (or command line tools such as dig or nslookup) are able to detect the SPF record (or any other TXT records). This SPF validator tool gives the following error: “Results – Permanent Error Void lookup limit of 2 exceeded”. The strange thing is that Mandrill recognizes the DKIM but not the SPF record.

What am I doing wrong?

My answer:

You used a CNAME for your zone apex, thus all other records for the domain are being ignored. If you actually want to place other records in the zone, you cannot use a CNAME at the apex.

View the full question and answer on Server Fault.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.