> On Mar 17, 2017, at 11:31 AM, James B. Byrne <byrn...@harte-lyne.ca> wrote:
>
> mohawkglobalta.com. 1476 IN TXT "v=spf1
> include:spf.protection.outlook.com ip4:208.33.203.70/31 -all"
Don't forget the lookups needed to process the "include:" clause, and the fact
that DNS observations vary with time.
$ dig +short -t txt spf.protection.outlook.com
"v=spf1 ip4:207.46.101.128/26 ip4:207.46.100.0/24 ip4:207.46.163.0/24
ip4:65.55.169.0/24 ip4:157.56.110.0/23 ip4:157.55.234.0/24 ip4:213.199.154.0/24
ip4:213.199.180.0/24 include:spfa.protection.outlook.com -all"
$ dig +short -t txt spfa.protection.outlook.com
"v=spf1 ip4:157.56.112.0/24 ip4:207.46.51.64/26 ip4:157.55.158.0/23
ip4:64.4.22.64/26 ip4:40.92.0.0/14 ip4:40.107.0.0/17 ip4:40.107.128.0/18
ip4:134.170.140.0/24 include:spfb.protection.outlook.com -all"
$ dig +short -t txt spfb.protection.outlook.com
"v=spf1 ip6:2a01:111:f400::/48 ip4:23.103.128.0/19 ip4:23.103.198.0/23
ip4:65.55.88.0/24 ip4:104.47.0.0/17 ip4:23.103.200.0/21 ip4:23.103.208.0/21
ip4:23.103.191.0/24 ip4:216.32.180.0/23 ip4:94.245.120.64/26 -all"
[ These have a 10 minute TTL ]
--
Viktor.
