How To Create An SPF TXT Record

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. After including the v=spf1 SPF version tag, you should follow with all IP addresses that are authorized to send email on your behalf. For example: v=spf1 ip4:34.243.61.237 ip6:2a05:d018:e3:8c00:bb71:dea8:8b83:851e “This tag indicates that this particular third party is authorized to send email on behalf of your domain.” Once you have implemented all IP addresses and include tags, you should end your record with an ~all or -all tag. The all tag is an important part of the SPF record as it indicates what policy should be applied when ISPs detect a server which is not listed in your SPF record. If an unauthorized server does send email on behalf of your domain, action is taken according to the policy that has been published (e.g. reject the email or mark it as spam). What is the difference between these tags? You need to instruct how strict servers need to treat the emails. The ~all tag indicates a soft fail and the -all indicates a hardfail. The all tag has the following basic markers: -all Fail: servers that aren’t listed in the SPF record are not authorized to send email (not compliant emails will be rejected). ~all Softfail: If the email is received from a server that isn’t listed, the email will be marked as a soft fail (emails will be accepted but marked). +all: We strongly recommend not to use this option, this tag allows any server to send email from your domain.

   In Third-party sender authentication

Quotes are verbatim and belong to their publishers. Where a quote has been translated, the original wording is kept below it.