From d720f4cb4b8ec7072dab324d7e08a0d3f55a315b Mon Sep 17 00:00:00 2001
From: "wytze@deboca.net"
 <wytze@deboca.net@14b1bab8-4ef6-0310-b690-991c95c89dfd>
Date: Sat, 26 Oct 2013 20:06:40 +0000
Subject: [PATCH] Synchronize with real server.

git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2519 14b1bab8-4ef6-0310-b690-991c95c89dfd
---
 cacert.org     |  5 +++--
 cacert.org.log | 13 +++++++++++--
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/cacert.org b/cacert.org
index 1c950a7..c8ff69f 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.61 2013/06/01 08:55:22 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.63 2013/10/26 19:53:08 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2013060101	; Serial
+					2013102601	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					2d		; expire time
@@ -18,6 +18,7 @@ $TTL	12h	;	default TTL for zone data
 @		IN	A	213.154.225.245
 @		IN	AAAA	2001:7b8:3:9c::245
 @		IN	MX	10 email.cacert.org.
+@		IN	TXT	"v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.239 -all"
 
 audit		IN	A	78.46.255.66
 blog		IN	A	213.154.225.234
diff --git a/cacert.org.log b/cacert.org.log
index 16de35c..29cc503 100644
--- a/cacert.org.log
+++ b/cacert.org.log
@@ -1,16 +1,25 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
 Working file: /var/opendnssec/unsigned/cacert.org
-head: 1.61
+head: 1.63
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 61;	selected revisions: 61
+total revisions: 63;	selected revisions: 63
 description:
 cacert.org - zone file for cacert.org
 ----------------------------
+revision 1.63
+date: 2013/10/26 19:53:08;  author: root;  state: Exp;  lines: +3 -3
+Include more addresses in SPF record for cacert.org, since the mail probes
+from the web server may come from different addresses (sad but true).
+----------------------------
+revision 1.62
+date: 2013/10/24 15:45:16;  author: root;  state: Exp;  lines: +3 -2
+Add SPF record for cacert.org.
+----------------------------
 revision 1.61
 date: 2013/06/01 08:55:22;  author: root;  state: Exp;  lines: +4 -4
 Update A and AAAA records for ns3 after server migration of mars.overmeer.net.