Last week I told you about how I added the DMARK DNS records to my domains but I made a crucial mistake. I botched the TXT record that allows you to send from GMail.

Convert Kit, my email tool, was just fine but I overlooked GMail which made for an annoying week. Even between me and my team that share Google Workspace emails were getting marked as spam.

Solution:

I had to add the SPF(Sender Policy Framework) record to the sending domain’s main TXT record. In terraform that looks something like this:

resource "aws_route53_record" "cloudwargames-com-txt" {
  zone_id = aws_route53_zone.cloudwargames_com.zone_id
  name    = "cloudwargames.com"
  type    = "TXT"
  ttl     = 300
  records = [
       "v=spf1 include:_spf.google.com ~all"
  ]
}

It took a few days for things to sort themselves out. I am assuming email providers were caching the DNS record for a lot longer than my defined TTL but, fingers crossed, it's working now.

Question For You:

What is the biggest DNS mishap you have encountered? Either by your doing or by others.