Exchange TXT MX SPF Records

Question

Hello,we are migrating all of our records from ISP to GTM and all A records have been migrated successfully by delegating from ISP to our GTMbut I cant create MX or TXT records at GTM to migrate it to GTMI have read some documents to add MX records through DNS&gt;Zones&gt;ZoneRunner&gt;Zone List. but I coulnt find any zones here and I dont know the impact of adding new zone here &nbsp;any help please

frabotta9500 · Answer

At face value, certainly you should not have a problem creating MX and TXT records under ZoneRunner -- they are fully supported.&nbsp;Your statement "...all A records have been migrated successfully by delegating from ISP to our GTM..." is a little confusing to me ... Normally, it is a subdomain that gets delegated to other DNS nameservers (such as F5 GTMs), not individual DNS resource records (e.g., A records) per se -- unless, of course, the sole purpose of the delegation is to achieve intelligent high availability load balancing via a wide-IP (under so-called "Delegation Mode", which usually involves CNAME records for the specific resource records involved) without actually delegating the entire subdomain to those nameservers.&nbsp;Since an ISP is involved, I assume that this is all in public DNS, and thus anyone is free to look at how your ISP is delegating to your GTM. Can you share the name of one of the A records that is successfully resolving in DNS, so that we can see (e.g., via nslookup, dig, etc) how the technical linkage is implemented between the ISP and your GTM?

mabdrasol · Answer

Hello,what I am did-Create A record for GTM at ISP-Create NS record at ISP  for delegation for every A record.and above steps worked fine.now I am trying to add MX and TXT records but with no luck as I cant find  any zones. but from tmsh I can find it any help please

frabotta9500 · Answer

I think I am starting to understand what you are saying, but I'm not completely sure. See if this is close to what your situation is ...&nbsp;For example purposes, say that your ISP has the ISP.COM domain allocated to it in DNS, and has created the subdomain MABDRASOL.ISP.COM for your use in which you can define your own DNS resource records. Obviously, the DNS records that you create must be either literally named mabdrasol.isp.com or have a prefix such as abc.mabdrasol.isp.com, def.ghi.mabdrasol.isp.com, etc.&nbsp;So, continuing with the example, say within your MABDRASOL.ISP.COM subdomain you originally had 3 A records with DNS hostnames defined to resolve to IP addresses as follows:&nbsp;www.mabdrasol.isp.com A 1.2.3.4ftp.mabdrasol.isp.com A 5.6.7.8smtp.mabdrasol.isp.com A 9.10.11.12&nbsp;Then, later you decided to migrate those A records so that they could resolve on your GTM instead of your ISP. So, the approach that you took was to first define them on your GTM with each being a separate zone in ZoneRunner:&nbsp;www.mabdrasol.isp.com - defined as a zone, with an A record of 1.2.3.4ftp.mabdrasol.isp.com - defined as a zone, with an A record of 5.6.7.8smtp.mabdrasol.isp.com - defined as a zone, with an A record of 9.10.11.12&nbsp;Then, at the ISP in your MABDRASOL.ISP.COM zone, you replaced the A records with NS records to achieve delegations as follows:&nbsp;www.mabdrasol.isp.com NS gtm.mabdrasol.netftp.mabdrasol.isp.com NS gtm.mabdrasol.netsmtp.mabdrasol.isp.com NS gtm.mabdrasol.net&nbsp;where, again for example purposes, gtm.mabdrasol.net is the DNS hostname of your GTM.&nbsp;&nbsp;Everything now works fine with that arrangement. When you want to make a change in how the three records resolve (e.g., perhaps have abc.mabdrasol.isp.com resolve to 4.3.2.1 instead of 1.2.3.4) you can just make the change directly on your GTM without having to utilize your ISP.&nbsp;But ... now say that you also have an MX record at the ISP:&nbsp;mabdrasol.isp.com MX 10 smtp.mabdrasol.isp.com&nbsp;and now you find that attempting to use same approach that you did with the above A records fails.&nbsp;The reason it fails is because to implement the needed NS delegation record:&nbsp;mabdrasol.isp.com NS gtm.mabdrasol.net&nbsp;you would have to create this record in the upper-level ISP.COM zone itself, which is under the exclusive control of your ISP.  You cannot create any DNS records there.&nbsp;In short, this is because mabdrasol.isp.com itself is a DNS domain name, whereas www.mabdrasol.isp.com, ftp.mabdrasol.isp.com, are DNS host names.&nbsp;I hope that this addresses your situation ... and that it helps.

mabdrasol · Answer

Hello,thank u so much for your explanation, please let-I have full access at ISP DNS records creation and modification-no zones created at ISP nor GTM itsself-what I did :1-delete A records from ISP side2-create NS record at ISP side2-create same A records at GTMno I plan to migrate MX and TXT resource records from ISP to GTM but when I use same steps to create VS&gt;POOL&gt;WideIP I cant configure the data itself at MX recordsthen I found a document to create it using zone runner but by using DNS&nbsp;&nbsp;››&nbsp;&nbsp;Zones&nbsp;:&nbsp;ZoneRunner&nbsp;:&nbsp;Resource Record List then create and choose type MX but unfortunately I couldn't complete the steps as MX should return data like xxxxxx.mail.protection.outlook.com.&nbsp;

frabotta9500 · Answer

Thank you for the clarification ...&nbsp;From your description, it seems like that (although, again, I can't be completely sure) I mostly understood what you were doing with the DNS resource records ... the only thing that I didn't understand was that for every A record that you migrated, you were using a wide-IP to represent it on your GTM; not RoadRunner. (Which, of course, would allow you to take full advantage of the intelligent DNS high availability load balancing with health check / service check / content check monitors that F5 offers over the local BIND instance utilized by RoadRunner.)&nbsp;However, for the MX records and TXT records -- unless they are being utilized for the hostnames under the subdomain that your ISP has granted you (MABDROSOL.ISP.COM in the example that I contrived) -- still have the same problem as in my example: a domain (or subdomain) cannot delegate its own name to other DNS nameservers. (Additionally, note that TXT records cannot be represented by a wide-IP.)&nbsp;SUGGESTION: Assuming you are doing your DNS work on the public Internet, could you share one of the successful A record migrations; and one of the MX records that you are unable to successfully migrate? This would clearly allow better understanding by all of what the issues are, and facilitate recommendations on how to correct.

Forum Discussion

Exchange TXT MX SPF Records

5 Replies

AppWorld Berlin iRules Contest!

F5 AppWorld 2026 Las Vegas - iRules Contest Winners!

Recent Discussions

Priority Group Activation is not working

Changes to DO and AS3 GitHub - no longer monitored

SSL Forward Proxy, iRules and Client Hello

monitor/healthcheck issue with envoy gateway

Recommendation for Adv. Lab

Related Content

Exchange 2016

SPF TXT lookup limit RFC 7208 4.6.4

Equinix and F5 Distributed Cloud Services: Business Partner Application Exchanges

Managing ZoneRunner Resource Records with Bigsuds

F5 GTM txt record validation

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS