SPF Generator

How the record is built

Select the mail services your domain sends its messages through, and enter the addresses of your own servers. The generator arranges the parts of the record in the usual order: a and mx first, then ip4 and ip6 addresses, then the include entries for the services, and all at the end. Addresses are validated and duplicates are removed.

Which all to choose

~all asks recipients to accept messages from other addresses but treat them with suspicion. -all asks them to reject such messages: use it when every sender is listed for sure. ?all makes no claim at all and only fits while you are still setting things up.

The limit of 10 lookups

The mechanisms a, mx, and every include consume DNS lookups, and the services behind includes have lookups of their own. When there are more than ten, recipients stop the check with an error. The generator counts the top level of the record; after publishing, SPF checker will show the exact count including all nested lookups.

The record is published as a TXT record on the domain itself.