diff --git a/cacert.org b/cacert.org
index c8ff69f..b50c250 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.63 2013/10/26 19:53:08 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.64 2013/11/27 16:37:59 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2013102601	; Serial
+					2013112701	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					2d		; expire time
@@ -22,7 +22,7 @@ $TTL	12h	;	default TTL for zone data
 
 audit		IN	A	78.46.255.66
 blog		IN	A	213.154.225.234
-blog		IN	TXT	"v=spf1 -all"
+blog		IN	TXT	"v=spf1 ip4:213.154.225.239 -all"
 board		IN	A	213.154.225.252
 bugs		IN	A	213.154.225.232
 cats		IN	A	213.154.225.243
diff --git a/cacert.org.log b/cacert.org.log
index 29cc503..76bba30 100644
--- a/cacert.org.log
+++ b/cacert.org.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
 Working file: /var/opendnssec/unsigned/cacert.org
-head: 1.63
+head: 1.64
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 63;	selected revisions: 63
+total revisions: 64;	selected revisions: 64
 description:
 cacert.org - zone file for cacert.org
 ----------------------------
+revision 1.64
+date: 2013/11/27 16:37:59;  author: root;  state: Exp;  lines: +3 -3
+Update TXT spf1 record for blog.cacert.org.
+----------------------------
 revision 1.63
 date: 2013/10/26 19:53:08;  author: root;  state: Exp;  lines: +3 -3
 Include more addresses in SPF record for cacert.org, since the mail probes