DNS - Multiple Root TXT Records

8

1

My email provider has requested that I add the following DNS entries:

@ 600 IN TXT "v=spf1 include:spf.myemailproivder.com mx ~all"
@ 600 IN TXT "verification=128763812763817638163"

However, my DNS host, Gandi, doesn't allow multiple TXT records with the same name.

Can anyone suggest an alternative way of maintaining both of the above DNS records?

I've tried using:

mydomain.com 600 IN TXT ...

but this doesn't work (presumably resolving to mydomain.com.mydomain.com)

I also tried:

mydomain.com. 600 IN TXT ...

but Gandi won't allow the dot after the name.

TheRogueWolf

Posted 2016-05-23T10:50:27.647

Reputation: 131

3...Gandi doesn't allow that? That's really surprising. Have you tried contacting their tech support to see if this might be just a bug in their DNS management UI? – user1686 – 2016-05-23T11:09:17.310

I was surprised too. I wasn't sure if it was a general DNS restriction? I contacted their tech support, who replied "Unfortunately you cannot have two records with the same name "@" and the same type "TXT" on your domain zone file." – TheRogueWolf – 2016-05-23T11:13:33.873

Put it on the same line then, "verification" right after "all". – Frank Sixteen – 2016-05-23T11:22:26.680

It's definitely not a DNS restriction. You can have as many records of the same type as you want (except SOA and CNAME). – user1686 – 2016-05-23T11:35:06.650

Putting everything on the same line, as per Frank Sixteen's suggestion, seems to allow SPF verification — albeit with an invalid syntax error caused by the additional verification string. – TheRogueWolf – 2016-05-23T12:22:14.703

3Gandi is broken if they don't allow this. Consider moving your DNS somewhere else. – Michael Hampton – 2016-05-23T13:06:10.883

So it is definitely valid to have two (or more) DNS TXT records named '@'? – TheRogueWolf – 2016-05-23T13:17:55.177

1@TheRogueWolf: It's even valid at gandi. See CMCDragonkai's comment on S. Pokorny's answer. You just have to give them the same TTL :-/ – mraaroncruz – 2017-02-28T12:48:56.877

In Azure DNS, restriction is the same: New-AzureRmDnsRecordSet : The Record set @ exists already and hence cannot be created again. Same TTL doesn't work. Is it valid to add multiple String into one TXT "@" record? – Xdg – 2017-09-19T16:37:57.087

Answers

8

I had the same issue. I went to expert mode and added the TXT line manually:

@ 300 IN TXT "verification=128763812763817638163"
@ 300 IN TXT "v=spf1 include:spf.myemailproivder.com mx ~all"

this should do it. Once back in normal mode both TXT entries show up

S. Pokorny

Posted 2016-05-23T10:50:27.647

Reputation: 81

3If the TTLs are the same, this trick works. If the TTLs are different then Gandi complains even on the expert panel. – CMCDragonkai – 2016-12-23T12:43:16.817

1

Adding:

@ 600 IN TXT "v=spf1 include:spf.myemailproivder.com mx ~all verification=128763812763817638163"

(as per Frank Sixteen's comment) seems to allow the record to be detected and passed by online SPF verifiers — albeit with some reporting invalid syntax for the additional verification string.

TheRogueWolf

Posted 2016-05-23T10:50:27.647

Reputation: 131

Asked: 2016-05-23T10:50:27.647

Viewed: 16 395 times

Active: 2016-08-15T16:49:54.513