New DNS records not being propagated (TXT & SPF)

Morning. I’m not having any luck adding new TXT and SPF records to my domain managed by Netlify. It’s been longer than a week since I made the changes, i’ve flushed on Google Public DNS and used their dig tool. The original site name is “sleepy-bassi-3873a7”. Any help appreciated.

Hi, @paulcrabtree, and welcome to the Netlify community site. I did find an SPF record which was not working.

The usual workaround for a non-working record is to delete the record and recreate it.

New records should work immediately. Changed records will be affected by the time to live of the previous record (not the current one). This won’t apply for records which should exist and don’t however. Non-working new records should appear when they are created or as soon as they are deleted and recreated if they don’t work as they should.

All records are working now when I test. If there are still non-working records when you test, please reply with the details to identify the non-working record and we’ll be happy to take another look.

If there are other questions or concerns, please let us know with a reply anytime.

Hi @luke , i’m still not seeing either TXT record with the name “google._domainkey.theuxagency.co.uk” or the SPF record with the value “v=spf1 include:_spf.google.com ~all”. I’m using Google Dig and mxtoolbox to test. Am I doing something wrong?

Hi, @paulcrabtree. For the TXT record for google._domainkey.theuxagency.co.uk, I do see it working here:

https://toolbox.googleapps.com/apps/dig/#TXT/google._domainkey.theuxagency.co.uk

Here is a local lookup with dig:

$ dig google._domainkey.theuxagency.co.uk TXT  +noall +answer

; <<>> DiG 9.10.6 <<>> google._domainkey.theuxagency.co.uk TXT +noall +answer
;; global options: +cmd
google._domainkey.theuxagency.co.uk. 3599 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8OPmwYkEyg4ejZmo4M+/NxQWuA/X+1Bpxjqx8Kd1NOwsF6arYbTGsaP7c/65dN8Ul9sSAnENUyO2l6jT3xq7Dt8/KsyM0GRvBmZmpj+jijDI5JbRkgt7HVdH/UIik27dB4yOLgJNAnVe2rmHuapl8i/gjT8y91gS7DYyKvez2D19cf1Xsch8r1CtzEA6EKKZ" "PUqlFiryjpHR9m+TcjkecsTySTBLg1Fr7FRKgMlnLXz7/fmRtjJyrvsWeRguZz5P5cxq3A3V7l6HL9hm20RoD/6MQdyVpSOivo4N8WQSXCe/5ssofmKibllLjEbdarMBMj20GZqC3VBG0ev75pePQIDAQAB"

The Google dig website doesn’t have an SPF option, so for that I only have the local lookup below:

$ dig theuxagency.co.uk SPF +noall +answer

; <<>> DiG 9.10.6 <<>> theuxagency.co.uk SPF +noall +answer
;; global options: +cmd
theuxagency.co.uk.	3599	IN	SPF	"v=spf1 include:_spf.google.com ~all"

So, again, both are working when I test. If you are able to install dig locally, using it to make a +trace option lookup like the one below may help highlight why it isn’t working locally for you:

$ dig theuxagency.co.uk SPF +trace

; <<>> DiG 9.10.6 <<>> theuxagency.co.uk SPF +trace
;; global options: +cmd
.			67086	IN	NS	a.root-servers.net.
.			67086	IN	NS	b.root-servers.net.
.			67086	IN	NS	c.root-servers.net.
.			67086	IN	NS	d.root-servers.net.
.			67086	IN	NS	e.root-servers.net.
.			67086	IN	NS	f.root-servers.net.
.			67086	IN	NS	g.root-servers.net.
.			67086	IN	NS	h.root-servers.net.
.			67086	IN	NS	i.root-servers.net.
.			67086	IN	NS	j.root-servers.net.
.			67086	IN	NS	k.root-servers.net.
.			67086	IN	NS	l.root-servers.net.
.			67086	IN	NS	m.root-servers.net.
.			67086	IN	RRSIG	NS 8 0 518400 20200412050000 20200330040000 33853 . NhQy8nm19ezGE3lHbnRZ5NyZUJBRkdaPY/WS9HDsOVRLk0b5pkiiyKzx BJeGLcbG/E+nHLb66nxxEflNW0xT+5mnmyCshLzxxVb8pnjDqxJRtziq qthDE7b86cPnkYWSCpbmt3K/QlRFi1K6jj4bqPYbhljNau7nPlQvzxp0 diPJ5SskMu+WQUfJE/vInw8IxdcwL7oP2QTNmld1hCr6zG3QAqMOywYY c9iO5klepvKTrIjAEQhMsv46tsJI2K621tnQHpaIXfnX5sdU/yrERkMX VVoU4AOl/XhVZ3Veqa5wU3RH8r30uRzZXSiDCJpJgWcs0ybL7KJEiGJZ C8zA0w==
;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 15 ms

uk.			172800	IN	NS	nsa.nic.uk.
uk.			172800	IN	NS	nsb.nic.uk.
uk.			172800	IN	NS	nsc.nic.uk.
uk.			172800	IN	NS	nsd.nic.uk.
uk.			172800	IN	NS	dns1.nic.uk.
uk.			172800	IN	NS	dns2.nic.uk.
uk.			172800	IN	NS	dns3.nic.uk.
uk.			172800	IN	NS	dns4.nic.uk.
uk.			86400	IN	DS	43876 8 2 A107ED2AC1BD14D924173BC7E827A1153582072394F9272BA37E2353 BC659603
uk.			86400	IN	RRSIG	DS 8 1 86400 20200412170000 20200330160000 33853 . cE3IH5poLc6c9AWBgeKLcp47sDjY4AR2e04YU0foLiMwrFJGTWEYLgec KgFakc1/0RdG9yI+8HHUqOuYgXQvSjhq+We9Qp6o8qqE9XigPtQ3Oq9D O8ILwmITPEK0MWJqzrPeGinMuc5a8MJeHK/v6QnioVV9ofciV9c/wyU8 VKSSSUk8XA3VXPBPkSt9CIkYpLuDyJTlpIotPzYvN4oyQgEUg52La3WS LbZksabQ6wqHfZjFq6xHtZXrZpctSthv1yo13HT4PSmIjv4Xt3i8hh1K eA7sSYjqBrDCD8dFntH//OS7qoElq/3F2ewSHykrF9r06PX1b07jVJdI ASs9sA==
;; Received 801 bytes from 199.7.91.13#53(d.root-servers.net) in 17 ms

theuxagency.co.uk.	172800	IN	NS	dns1.p05.nsone.net.
theuxagency.co.uk.	172800	IN	NS	dns4.p05.nsone.net.
theuxagency.co.uk.	172800	IN	NS	dns3.p05.nsone.net.
theuxagency.co.uk.	172800	IN	NS	dns2.p05.nsone.net.
G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk.	10800 IN NSEC3 1 1 0 - G9HKV8PHGJ1NMH94L9RMIQM0J64UCIPK  NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534
G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk.	10800 IN RRSIG NSEC3 8 3 10800 20200429102040 20200325092914 33621 co.uk. EldRtiem28VVDiEc2ZNDMoajj5bpohnL2cXgdLUus6dSNAe7tvhnvsgB tYWgJDexLmXyo6Mm/mG6/lT5Ix1kabCc0FIND7TX3xfYxlTZSerZwoMC rpMvJFdVvg70LB/jC7L2ItxtandqYL5jJ3UcPiiAgDnr+8C2YWwa+12b mE0=
C604Q8T57BJAQ5OEVMMDBD83UTH3N0R8.co.uk.	10800 IN NSEC3 1 1 0 - C6524ORK9BVUC79KU5FD21GIP4QNU42K  NS DS RRSIG
C604Q8T57BJAQ5OEVMMDBD83UTH3N0R8.co.uk.	10800 IN RRSIG NSEC3 8 3 10800 20200430125447 20200326124038 33621 co.uk. jlajHTtcbYqr4BAr5eah2YVTCRlZV1fw5ntykGzrgXWx1iy9KNvFrcD/ yg/zISsoT+W3rQQVt9m6Wy+KRkYzFTvbsnPz9HhJ/hHWzaeYKqjKba1b 1pjpDhtOwMqTXoglQOjetmgrMsOxzxxDskkS5aviArTH3+WfVdA5HuMQ oyo=
;; Received 658 bytes from 156.154.103.3#53(nsd.nic.uk) in 18 ms

theuxagency.co.uk.	3600	IN	SPF	"v=spf1 include:_spf.google.com ~all"
;; Received 94 bytes from 198.51.44.5#53(dns1.p05.nsone.net) in 17 ms

This shows the recursive lookup of the DNS record which does return the record.

Would you be willing to run that +trace lookup for any records not working for you locally?