An SPF record tells recipients which servers may send mail on behalf of your domain. This tool parses the record, counts the DNS lookups (SPF may use at most ten before it fails) and warns about common mistakes.
What this tool does
The tool reads the SPF record from the domain TXT records, follows the include references and computes the number of DNS lookups. Errors such as plus-all, a missing all mechanism, duplicate records or the deprecated ptr mechanism are reported.
How to use it
Enter the domain name and run the check. You see the full record, each mechanism separately and a summary with the policy and the lookup count.
Input and output
- Input: a domain name
- Output: the SPF record, the mechanisms found, the number of DNS lookups and a verdict on the policy
Limitations
The tool judges the syntax and the lookup limit; it cannot decide whether every legitimate sender is actually listed in the record. That remains a manual assessment.
Good to know
Stay under the ten DNS lookups by removing redundant includes and consolidating senders. Never use +all, because it lets anyone send on behalf of your domain and makes SPF worthless.