Recursion is causing infinite DNS lookups

Website, Application, Performance DNS & Network
1

What is the name of the domain?

What is the error number?

none

What is the error message?

Recursion is causing infinite DNS lookups, which will lead to SPF authentication failure.

What is the issue you’re encountering

unable to send email

What steps have you taken to resolve the issue?

none taken

What feature, service or problem is this related to?

Mail records

2

Welcome to the Cloudflare Community :logodrop:

You currently have no SPF record. You should create one by following your email provider’s directions.

3

that unrelated issue

4

Really? You said in your initial post:

That language would ordinarily refer to an SPF record that contained an include mechanism consisting of the domain, which would cause a fatal infinite recursion. When I looked for your SPF record earlier, none was found. Now I see one that contains an inappropriate include mechanism that will cause an infinite loop and invalidate the SPF.

You need to remove include:samuiluxurycar.com from your SPF record if you want it to work.

2 Likes
5

thanks for your advice…
is this an issue?
“Number of lookups is greater than 10. (12)”

1 Like
6

Yes. Twelve DNS lookups will also cause an SPF record to fail. It may contain no more than ten lookups. You only have seven right now, although you could easily make it six since your a mechanism is returning Cloudflare proxy IPs and those will never send email for your domain. That means you can safely remove the a mechanism.

You can see more information about the content of your SPF record in the following report.

7

IMG_1909
IMG_19091920×1440 223 KB

This is the same for our villa website which i have used as example.
I’m a bit confused about the relationship/connectivity with sendgrid.net and google mail …
Which records (type) should/can I remove which are redundant?

8

I’m also missing a BIMI record?

9

Do you have a registered trademark? If not, you cannot create use BIMI. If you do hold a registered trademark, you should consult your BIMI service provider for guidance on creating the necessary records that they require.

There is no relationship between Google Workspace and Sendgrid. I can’t tell you what records you can delete bcause I dont know what service providers you use. Typically you need any records that you have been instructed to create. It is important to understand when you need to merge content, like an SPF record, versus add an additional record, such as DKIM.

10

Thanks for your help. I’m still stuck but will investigate sendgrid and google records to try and avoid having more than 10 DNS look ups

MX Records - google
Allowing google to be your mail server.

CNAME Records
These are all the identifiers to allow SendGrid to send mails as the domain.

TXT Records
SPF
DKIM mail send verification
Google site verification

11

You only have seven lookups present in the SPF record for samuiluxuryvilla.com and it could easily be reduced to six by removing the unnecessary a mechanism that is currently resolving to Cloudflare proxy IPs. Those IPs will never send email on behalf of your domain.

12

Which a record is that?

SPF Record Checker and Lookup Tool | EasyDMARC - looks ok?

13

v=spf1 a mx include:google.com ~all

Or you mean remove the a mechanism above?

1 Like
14

Not any A record: the a mechanism in your SPF. You don’t need the MX mechanism either. Google uses different IPs for inbound and outbound email. This will eliminate two unnecessary lookups from your record.

Update SPF
Change this: v=spf1 a mx include:google.com -all
Into this: v=spf1 include:google.com -all
1 Like
15

thanks

1 Like
16

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.