HexBrain

Cakebet · Report #119033

Sender policy framework (SPF) records evaluation return (Too many DNS lookups) error

Validstatus
5upvotes
28 Mar 2016disclosed

How it was found

Hi Security Team ,

Your SPF record suffers from a “too many lookups” error.

The specifications for the SPF record limit the number of lookups (such as, translating a name to an IP address) to 10.

An SPF record like what is shown below will have the too many lookup errors :

Found v=spf1 record for cakebet.com: v=spf1 mx include:zoho.com include:smtp1.uservoice.com include:amazonses.com include:_spf.google.com ~all

evaluating... Results - PermError SPF Permanent Error: Too many DNS lookups

  • How to Fix it : Make the SPF record passed validation test with pySPF (Python SPF library)

Good Fix ,

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original