Correct SPF record using google apps

Question

Can anyone help me out?

I am using google apps, and google is handling my email. check out www.google.com/apps/

Well i have created the SPF record mention in the help forum in google, but the SPF record did not pass, verified by using [email protected] and [email protected]

After searching a bit i found that the SPF mentioned in google

v=spf1 include:aspmx.googlemail.com ~all

is wrong and buggy, after consulting a hardcore programmer, we created an SPF record as

v=spf1 a mx include:_netblocks.google.com include:aspmx.googlemail.com include:_spf.google.com ~all

this however passed the test using both the method mentioned above. However when i send a mail to a###l@ind###########cer.org it shows delivery failed with the following message

Delivery to the following recipient failed permanently:

    a###l@ind##########cer.org

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 The sender did not meet Sender Policy Framework rules. Please see http://spf.pobox.com (state 18).

However if i send mail from Yahoo or Gmail it gets delivered successfully,

Please Help me Out!!

Answer 1

The following TXT record works for me:

v=spf1 include:_spf.google.com ~all

Answer 2

v=spf1 a mx include:aspmx.googlemail.com include:_spf.google.com ~all

Answer 3

Thank you guys - I was trying to add Webmaster tools validation in a second line of TXT in the DNS, but Google kept tripping on the old aspmx.googlemail.com code. I went hunting for answers. Found it here. Thank you! StackOverflow rocks!

Answer 4

This was very helpful. Thank you all for your input. One question... what does the "_" mean in include:_spf.google.com