DNSFly

SPF Record Checker

Look up and validate the SPF record for any domain. See which servers are allowed to send its mail, how many DNS lookups it uses, and whether the policy is set correctly.

What an SPF record does

An SPF (Sender Policy Framework) record is a TXT record that lists the mail servers allowed to send email for your domain. When a receiving server gets a message, it checks whether the sending server's IP is on that list. If it isn't, the message can be marked or rejected depending on your policy.

This checker reads the SPF record published at your root domain and breaks it down. For a full explanation of the syntax, read what is an SPF record.

How to read the result

The breakdown shows the mechanisms in your record, the number of DNS lookups it triggers, and the "all" policy at the end. The lookup count matters because SPF allows a maximum of 10; going over causes a permerror and SPF stops working.

The "all" mechanism decides what happens to servers not on the list. -all rejects them, ~all marks them as a soft failure, and ?all or +all apply little or no protection.