Name Servers
sfdc.net. 1200 IN NS dns01.salesforce.com. sfdc.net. 1200 IN NS dns02.salesforce.com. sfdc.net. 1200 IN NS dns03.salesforce.com. sfdc.net. 1200 IN NS dns04.salesforce.com. sfdc.net. 1200 IN NS dns05.salesforce.com. sfdc.net. 1200 IN NS dns06.salesforce.com. sfdc.net. 1200 IN NS u2dns1.salesforce.com. sfdc.net. 1200 IN NS u2dns2.salesforce.com.
SOA Details
sfdc.net. 1200 IN SOA dns01.salesforce.com. hostmaster.salesforce.com. 2017012616 1800 900 2592000 1800
Certificate Authority Authorization
No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
0Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
sfdc.net. 1200 IN DMARC v=DMARC1;p=quarantine;fo=1:d:s;pct=0;rua=mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected]
DKIM
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
| Qual | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| redirect | salesforce.com | |||
| ~ | all | — |
sfdc.net. 1200 IN TXT "v=spf1 redirect=salesforce.com ~all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
sfdc.net. 1200 IN TXT "SFDC Networks"