I would turn on SMTP Auth in Postfix and forget about the spf records.  
Then relay via Surgemail.  Done deal.

Lyle



On 07/30/14 15:59, David Camm wrote:
> i'm in the process of bringing a new web server online. os is ubuntu 
> 14.04.1 lts and the installed mta is postfix.
>
> postfix now requires that the server hostname be an fqdn (fully 
> qualified domain name), so i've made it newmain.advwebsys.com
>
> in my zone file for advwebsys.com i have an spf record like so:
>
>                IN TXT  "v=spf1 a mx ipv4:x.x.x.x  -all"
>
> when i try to send mail to myself from the new server, i get:
>
> Received-SPF: none (No spf1 record for (newmain.advwebsys.com) ) 
> client-ip=72.249.173.30; envelope-from=HIDDEN@ewmain.advwebsys.com>; 
> x-ip-name=
> X-Default-Received-SPF: fail (Last token {-all} (res=FAIL)) 
> client-ip=72.249.173.30; envelope-from=HIDDEN@ewmain.advwebsys.com>; 
> x-ip-name=;
>
> newmain has an A record in the zone file.
>
> can i add:
>
> newmain   IN TXT "v=spf1 a -all"
>
> in order to make this work?
>
> btw, newmain's ip address is defined in g_relay_allow_ip.
>
> david camm
> president
> advanced web systems
> keller, tx
>
>
>