From 190eecb7ee1b61c1e60bab7f8f9671b7d264d172 Mon Sep 17 00:00:00 2001 From: Maurus Decimus <11444311+mdecimus@users.noreply.github.com> Date: Tue, 19 May 2026 16:44:29 +0200 Subject: [PATCH] Skip `v=spf1 a -all` records for apex domains --- CHANGELOG.md | 1 + crates/common/src/network/dns/records.rs | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e0912721..577f7daa 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -77,6 +77,7 @@ If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If - JMAP: `Thread/get` did not filter by per-mailbox ACLs on shared accounts. - RFC2136 TSIG: regression related to multiplexer. - IMAP: `UID FETCH N:*` could miss messages moved into a SELECTed mailbox by another connection. +- DNS records: Skip `v=spf1 a -all` records for apex domains. ## [0.16.5] - 2026-05-11 diff --git a/crates/common/src/network/dns/records.rs b/crates/common/src/network/dns/records.rs index 87942695..eadc5b51 100644 --- a/crates/common/src/network/dns/records.rs +++ b/crates/common/src/network/dns/records.rs @@ -78,7 +78,7 @@ impl Server { .collect::>(); for mx in mxs { - if mx.ends_with(&domain_name_suffix) || mx == domain_name { + if mx.ends_with(&domain_name_suffix) { records.push(NamedDnsRecord { name: format!("{mx}."), record: DnsRecord::TXT("v=spf1 a -all".to_string()),