Skip to main content

DNS MX Record Has Valid SPF in Associated TXT Record

ID: rule:aliyun:alidns-route-53-mx-check
Severity: high

Description

Ensures that MX records have associated TXT records with valid SPF values for email validation.

Reason for Violation

MX records without valid SPF configuration may be vulnerable to email spoofing.

Recommendation

Configure TXT records with valid SPF values for each MX record.

Resource Types

  • ALIYUN::DNS::DomainRecord