Managed DKIM/SPF services and Postal DNS Checker

[DirectITServicesUK]

Describe the bug

Not sure a bug, but maybe needs extra code to check DKIM and SPF for managed services.
I use RedSift OnDMARC services to manage my DKIM, DMARC and SPF records with Dynamic services.
In this example, my SPF record is "v=spf1 include:_u.DOMAINNAME._spf.smart.ondmarc.com ~all" and all the "Include" mechanisms are fed from that SPF record from OnDMARC.
Same with DKIM. My DNS record for my domain is _domainkey.DOMAINNAME | NS |  ns-dkim.ondmarc.com and all my DKIM entries are managed in OnDMARC portal e.g. - postal-ditccq | TXT | v=DKIM1; t=s; h=sha256; p=MIGfMA0GCS.....
I get Warning An SPF record exists but it doesn't include spf.mailer.POSTALSERVER.co.uk and Warning No TXT records were returned for postal-dITCcQ._domainkey.DOMAIN

Running a DKIM checker on MXToolbox reveals he correct DKIM key - DOMAIN:postal-dITCcQ

Expected behaviour

It'd be clever if the Postal DNS checker followed SPF and DKIM records to check for existence of the real records

[tuandat0410b]

I also got the same error

[willpower232]

I can't find it now but someone definitely brought up this service previously.

I don't know if toggling the local ns resolving is enough to figure it out or if Postal is digging too deeply in the wrong place

postal/doc/config/yaml.yml

Line 23 in b7e5232

use_local_ns_for_domain_verification: false

[noidee-dev]

@willpower232 Sorry for the late response. I had reported this a few months ago (3434), and I wanted to try out your suggestion — and suddenly months had passed again…

I’ve now finally tested it with use_local_ns_for_domain_verification: true, and with that enabled everything seems to work as expected.

The only thing I noticed is that Postal does not appear to follow the SPF redirect directive (v=spf1 redirect=domain.xx) during verification.

[willpower232]

I've never seen it before but yeah Postal probably doesn't if it doesn't even follow the CNAME