The situation:  Domain name: fisharwe.comSite hosted by eukhost.comDomain name registrar: nearlyfreespeech.netMx Records point to google apps serverscreated a TXT record at nearlyfreespeech with the following:v=spf1 ip4:109.203.117.237 a:fisharwe.com include:aspmx.googlemail.com ~allMail is sent either through the gapps web interface, either through the site (which uses ASP)Some mail still gets rejected as spamI manage my own apache server, so I am not a complete newbie, but I am having trouble understanding DNSes. Specifically, I am not sure I really understand the syntax of SPF.When I go to the intodns check, I get a few errors still.I don't really understand what to do. Google search yields a lot of resources, but most of them unclear, often contradicting each other. Is there any place that gives a comprehensive, cohesive view of how servers and DNS work? With a few receipes for most common use cases, that would be perfect.For the record, here are the errors I get at intoDns:Domain NS recordsNameserver records returned by the parent servers are:ns.phx3.nearlyfreespeech.net.   ['208.94.116.65']   [TTL=172800]ns.phx7.nearlyfreespeech.net.   ['208.94.117.1']   [TTL=172800]     NS records from your nameserversNS records got from your nameservers listed at the parent NS are:ns.phx3.nearlyfreespeech.net  ['208.94.116.65']   [TTL=3600]ns.phx7.nearlyfreespeech.net  ['208.94.117.1']   [TTL=3600]Glue for NS recordsINFO: GLUE was not sent when I asked your nameservers for your NS records.This is ok but you should know that in this case an extra A record lookup is required in order to get the IPs of your NS records. The nameservers without glue are:208.94.117.1208.94.116.65You can fix this for example by adding A records to your nameservers for the zones listed above. SOA MNAME entry WARNING: SOA MNAME (ns.phx1.nearlyfreespeech.net) is not listed as a primary nameserver at your parent nameserver!Warn  SOA Serial  Your SOA serial number is: 1323999125. This can be ok if you know what you are doing.Warn  SOA REFRESH     WARNING: Your SOA REFRESH interval is: 600. That is not so okSOA EXPIRE Your SOA EXPIRE number is: 86400. That is NOT OKWWW A Record Your www.fisharwe.com A record is:  [109.203.117.236]  [109.203.117.237] I know this question is unlikely to serve the community as it is very specific, but I don't know where to turn to, I've been on this for days now. Any pointer would be appreciated.
Mail using google apps rejected as SPAM, having trouble using SPF records
dns;google apps;mx