{"id":4820,"date":"2020-09-29T12:30:32","date_gmt":"2020-09-29T12:30:32","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=4820"},"modified":"2020-09-29T02:40:31","modified_gmt":"2020-09-29T02:40:31","slug":"netsuite-spf-records","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/netsuite-spf-records","title":{"rendered":"Netsuite – SPF Records"},"content":{"rendered":"

What a mission this was!<\/p>

Oracle netsuite just flat out refuse to give you a list of IP Address’ for their sending servers<\/p>

“Support will not provide a list of NetSuite IP addresses” https:\/\/docs.oracle.com\/cloud\/latest\/netsuitecs_gs\/NSADM\/NSADM.pdf<\/a><\/p>

Ontop of this there’s no way to use an internal domain name to send emails like noreply@email.netsuite.com , so there is no clear way to whitelist your spamfilter\u00a0 ……<\/p>

After back and forth with their support , they finally gave us sent-via.netsuite.com which you can do a DNS lookup of to get the IPs ( You will have to monitor this for updates ) . Mimecast allows you to whitelist via SPF record so we could add this<\/p>

 <\/p>

Name: sent-via.netsuite.com<\/p>

> set type=txt
> sent-via.netsuite.com
Server: dns.google
Address: 8.8.8.8<\/p>

Non-authoritative answer:
sent-via.netsuite.com text =<\/p>

“google-site-verification=MgKgRWwbn2QifDQBVdRu-IQLvbiR8GFB1hNDz_fmzPU”
sent-via.netsuite.com text =<\/p>

“v=spf1 include:mailsenders.netsuite.com include:_spf.sparkpostmail.com -all”
> mailsenders.netsuite.com
Server: dns.google
Address: 8.8.8.8<\/p>

Non-authoritative answer:
mailsenders.netsuite.com text =<\/p>

“v=spf1 ip4:167.216.129.180\/32 ip4:167.216.129.182\/31 ip4:167.216.129.184\/29 ip4:167.216.129.192\/29 ip4:167.216.129.200\/32 ip4:167.216.129.210\/32 ip4:64.89.45.192\/30 “
“ip4:64.89.45.196\/32 ip4:208.46.212.208\/31 ip4:208.46.212.210\/32 ip4:185.72.128.75\/32 ip4:185.72.128.76\/32 ip4:212.25.240.83\/32 ip4:212.25.240.84\/31 ip4:72.34.168.76\/32 “
“ip4:130.61.9.72\/32 ip4:130.61.68.235\/32 ip4:132.145.13.209\/32 ip4:132.145.11.129\/32 ip4:152.67.105.195\/32 ip4:140.238.193.139\/32 ip4:152.67.105.20\/32 ip4:72.34.168.86\/32 ip4:72.34.168.85\/32 “
“ip4:64.89.44.85\/32 -all”
> _spf.sparkpostmail.com
Server: dns.google
Address: 8.8.8.8<\/p>

Non-authoritative answer:
_spf.sparkpostmail.com text =<\/p>

“v=spf1 exists:%{i}._spf.sparkpostmail.com ~all”
><\/p>

 <\/p>

I also recommend you change the From address to a generic netsuite@yourdomain.com so easy to monitor<\/p>

\"\"<\/p>

 <\/p>

Dkim<\/p>

https:\/\/www.proteloinc.com\/blog\/compliant-messaging-in-netsuite\/<\/p>","protected":false},"excerpt":{"rendered":"

What a mission this was!Oracle netsuite just flat out refuse to give you a list of IP Address’ for their sending servers“Support will not provide a list […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1222,3350,983,3349,1224,1948],"class_list":["post-4820","post","type-post","status-publish","format-standard","hentry","category-research","tag-dkim","tag-netsuite","tag-oracle","tag-sent-via-netsuite-com","tag-spf","tag-whitelist"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t