You can add as many domains and IPs as you want—just separate. Just as fast as a regular SPF record will be updated. Change sources order. Look Up DKIM Record. • March 2, 2023. In practical terms, this means that if your SPF record includes too many "include" mechanisms, "a. SPF1 and SPF2 would look like this with all IP's. Sports. Contact us via Email, Phone, or TicketABOUT DNS LOOKUP. Incorrect SPF record syntax. 0 runtime; PowerDNS server with a configured API key; AutoSPF account; Usage. Det fungerer ved at erstatte alle domænerne i SPF-recorden med deres IP-adresser, hvilket eliminerer behovet for flere DNS-opslag. Hello, I am hoping for advice please, on the best way to reduce the number of additional DNS lookups on our SPF record. Flattening simply substitutes all domains in the SPF record for their IP addresses, eliminating the need for DNS search. sandro September 4, 2019, 7:38pm 4. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. ; Email Email us with your customer support inquiry. Razões para evitar SPF Flattening. To run an SPF check, enter the domain in question, and it will fetch the SPF record (if any) from the DNS. SPF Flattening. Change sources order. In the SPF/SIDF Verification section, click Yes. Lastly, ensure that the final merged SPF record starts with the “v=spf1” modifier and ends with the “all” mechanism. This includes creating and updating these records. I was told by GoDaddy to use the first option. v=spf1 +a +mx include: spf. Access your account. Then they need to replace the original mechanism with the IP address. The generated SPF-record can then be stored as TXT resource record in the zone of your name server. Comments Here are some insights into your SPF record. This test will list DNS records for a domain in priority order. cfflatten CloudFlare SPF Flattener. SPF appears valid . This test will lookup an SPF record for the queried domain name, display the SPF Record (if found), and run a series of diagnostic tests (SPF Validation) against the record, highlighting any errors found with the record that could impact email delivery. Sign up. DynamicSPF carries out dynamic flattening and auto-updates the netblocks to make sure your authorized IPs are always up-to-date. com to refer directly to the thirdparty SPF records; thus removing 2 from our count. This option allows you to determine which standard of SPF or SIDF verification to use. It is a process of compressing an SPF record into sets of IP addresses. This project implements Sender Policy Framework (SPF) record flattening for CloudFlare managed DNS zones. SPF record flattening is a technique used to optimize SPF (Sender Policy Framework) records to overcome the 10 DNS lookup limit for SPF. I have created a python script that generates config files for DNS server rbldnsd. A domain can have no more than one SPF record. Free SPF flattening? This tool can flatten SPF records. ABOUT SPF RECORD CHECK. g. com ~all. Paste the record. Once done the reporting organization will start sending you reports by mail to your reporting address. SPF Flattening. Any SPF check would be looking up SPF according to the macro here. SPF flattening. The specification lets you authorize individual mail servers by IP address or by ‘including’ SPF records that are defined on a specified domain. Our customers see a 6-8 week average time to full DMARC enforcement (p=reject or p=quarantine). The SPF lookup limitation isn’t hard to reach. This can be as simple as removing a few duplicate entries (Gmail is often included in many provider SPF records) or completely refactoring the list of. Our tools are designed to easily expose the issues threatening your email delivery. When a source changes the monitored SPF record, this change will be processed, and the delegated SPF record will be updated accordingly. SPF flattening empowers startups to manage their expanding email ecosystem efficiently during critical stages of growth. Select Add New Record and then select TXT from the Type menu. com) Import DNS SPF record into system. com" domain, and use AutoSPF to "flatten" its various records. Flattening the SPF record to include less DNS lookups and substituting them for IPs (flattening) is a way to get around the limit. g. Automatic/dynamic SPF record flattening. DMARC Domain Checker; DMARC Inspector; DMARC Record Wizard; SPF Surveyor; DKIM Inspector; DKIM Validator; XML to Human Converter; DMARC Data Providers;. DMARC . The project is opensource; It will query your list of approved sendors and flatten these into a list of appropriately formatted and sized spf records composed of ip4 and ip6 spf entries. Publish the DNS record in your DNS management console and save changes. Concluding the Experiment: SPF Flattening. Similarly, it also notifies you when there is no valid SPF. SPF flattening is not a one time task. Higher compliance rates mean better email deliverability and better email inbox delivery. up to _spfcf12. If a record contains too many DNS lookups, it may do more harm that good. SPFFlatten. Start implementing subdomains for services. Upgrade for Live Support. 3. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. DMARC Email Delivery Tools. 3. You won't know if they make a change until you possibly start having bounces. Flattening refers to the replacement of all the domains in your SPF record with their respective IP addresses. Methods for flattening. Their blog, MxToolbox: How to Enable SPF, DMARC, and DKIM, is a great guide for setting up SPF, DKIM and DMARC in a single outbound email sender Office 365 configuration. Handling several SPF records leads to misconfigurations, including conflicting rules or omitted senders. Especially with SPF, it is easy to simply add all the ‘include. Sender Policy Framework, or SPF, is an email authentication technique that helps protect senders and recipients from spam, phishing and spoofing. When the SPF PermError: Too Many DNS Lookups issue strikes, your email deliverability can take a bad hit due to SPF fail. Our SPF Flattening Tool is a revolutionary feature and a disruptive development in the market in terms of performance, security and management. When someone tries to send you an email, their server checks the SPF policy for your domain to determine if it should accept the message or not. The issue is that a customer might be using a number of different mail service providers with each one offering an include mechanism that needs to be added in DNS in order. Ecosystem News Email Security Insights Inside dmarcian. The SPF lookup limit wasn’t a problem when most companies operated their mail servers. NEAR ZERO CONFIGURATION. google. Flatten the SPF record manually and monitor it closely with a script. GlockApps has the built-in tool called SPF Flattener which automates SPF record flattening. NOTE: this approach does not take into account administrative or domain boundaries, and is meant to show that "minified" SPF records are possible. Yes, the third party service Valimail does things programmatically like this, effectively giving each IP address a lookup in their. Welcome to DMARC Advisors’ SPF Check: the best tool to verify your Sender Policy Framework record. This helps to keep a live audit log of what each IP address is for, who put it there, and when it can be removed. Scaling a company involves a continual to and fro of emails, which can impede SPF deployment, especially for new domains. You can use our SPF flattening tool to optimize your record automatically that never exceeds the 255 character SPF record length limitUpgrade for Live Support. Dynamic SPF is an OnDMARC feature that allows you to beat the 10 DNS lookup limit in a simple and elegant way. No charge for phishing attacks, or invalid mails sent on your behalf. The SPF record checker, aka SPF record validator/tester, checks if an SPF record is published on a domain, and if the SPF record's syntax is correct. However, since ISP's change their IP addresses frequently, the flattened IP addresses change accordingly. Although this feature is desirable in some circumstances, it is a major obstacle to reducing Unsolicited. SPF permerror can be a result of your DNS lookup limit exceeding the permitted threshold of 10. spf. create a file with credentials . SPF flattening is the process of converting an SPF record into a format that contains fewer than 10 DNS lookups. If you click on the next tab called “SPF record generator,” it will allow you to generate your SPF record. That’s over 1 Billion inboxes you could be missing! MxToolbox Delivery Center Plus provides the best solution for setting up and monitoring your DMARC, DKIM and SPF compliance rates. MxToolbox SPF Flattening: Reviews the Verified Email Sources and manually added IP addresses currently in the SPF record. Tools. NFL NBA Megan Anderson Atlanta Hawks Los Angeles Lakers Boston Celtics Arsenal F. It works by replacing all the domains in the SPF record with their IP addresses, which eliminates the need for multiple DNS lookups. com to refer directly to the thirdparty SPF records; thus removing 2 from our count. Phone: 1 778 265 0114 Mail: info@timberstonetools. Our simple DMARC Analyzer pricing packages are based on outbound DMARC-compliant mails only. There are many reasons why SPF might break and be rendered invalid by the MTA while performing DNS lookups: Exceeding the 10 SPF lookup limit. v=spf1 ip6:2001:4860:4000::/37 v=spf1 include:_spf. example. After the tenth lookup, SPF authentication will cease and fail. If you’re wondering why sometimes even legitimate emails are getting blocked and failing SPF on your receiver’s server, you have come to the right place. We quickly got over the 10 DNS lookups per SPF record. Our platform performs superior automatic flattening on your SPF record, instantly reducing your lookups. Email headers are present on every email you receive via the Internet and can provide valuable diagnostic information like hop delays, anti-spam results and more. You need to always be aware of any changes that could be made by email service providers in their SPF, which you include in your SPF record, and update your flattened SPF record accordingly. protection. Ever since Gmail anounced they’d go stict against senders that don’t have SPF set up properly, we’ve been adding all our email sending services to our SPF DNS record. By utilising SPF macros to split each permitted IP address into a separate DNS record, you then have the ability to add a DNS TXT record 'next to' the A record to note what it's for. Check the SPF record using EasyDMARC's SPF Checker or command-line tool to ensure all the authorized IP addresses and sources are listed. com will manage your SPF includes (using cloudflare and route53 for DNS) for about $7 per month - or if you just want flattening and monitoring the service is 100% free. 1, "Processing Limits" of the SPF RFC, SPF implementations must limit the number of DNS lookups to a maximum of 10 per SPF check. You need to always be aware of any changes that could be made by email service providers in their SPF, which you include in your SPF record, and update your flattened SPF record accordingly. 1. Multiple SPF Records. Note that every SPF record also has a 255 character limit, so if you're using only IPs you'll need to break that up into a lot of SPF records probably. com. Dynamic SPF Solutions. 4 billion emails were sent and received each day in 2020, the figure is expected to increase to over 361. SPF records usually contain ‘include’ statements that refer to other domains' SPF records. Dynamic SPF Flattening is designed to simplify and optimize SPF records in complex email delivery systems. We flatten the SPF entries (so you stay under the 10/10 DNS lookups) under one include. SPF Pass Rates for Verified Sources AutoSPF automatically flattens and compresses all domains within the SPF, eliminating the need for additional DNS lookups. This test will lookup an SPF record for the queried domain name, display the SPF Record (if found), and run a series of diagnostic tests (SPF Validation) against the record, highlighting any errors. One solution to the SPF lookup limit is “SPF flattening. MxToolbox offers an SPF Flattening tool as part of our Delivery Center Plus plan. The SPF record checker, aka SPF record validator/tester, checks if an SPF record is published on a domain, and if the SPF record's syntax is correct. ourDomainName. It works by. We help fix a very specific technical email issue, we flatten SPF records that exceed the 10-lookup threshold. When using SPF email authentication, each time an email is sent from a domain to the recipient’s domain, the recipient’s email server performs DNS query requests, also known as DNS lookups, to check for existing authorized IP addresses in your DNS and compare them to. We are hiring! Login; Sign Up FreeTraditional SPF flattening services can inadvertently expose authorized IPs and sending sources to potential fraudsters. Maintaining Consistency. up to _spfcf12. There could be bug with multiple nested or flattened SPF records, which we are working on currently. SPF validator. With this tool you can inspect and validate your SPF DNS record. AutoSPF will automatically flatten all domains in the include. Publish it on your DNS, and you're all set! Try our SPF Record Generator now. A more effective way to avoid SPF errors is to deploy an SPF flattening tool that is automatic and hassle-free – like PowerSPF! This not only ensures that you stay within the 10 DNS lookup limit, it also keeps you updates on any changes made by your email service providers and vendors who. 2016/11 - new records on output. Type: TXT. com) and transforms it into this: cfflatten CloudFlare SPF Flattener. The tool will show the number of DNS querying mechanisms used in the SPF record for your domain. It can be. EasyDMARC is a comprehensive and easy-to-use tool that ensures organizations can manage their SPF, DKIM, and DMARC setup effectively. SPF Flattening is a process of compressing an SPF record into sets of IP addresses. This record could be flattened to have zero DNS lookups and would look something like this:SPF Flattening and its advantages The DNS lookup limit is a restriction imposed by email servers that limit the number of DNS lookups that can be performed when verifying an email’s SPF record. Bonita Fierce Candles. It is based on real-time information in the include statement. Which is why we’re wanting to investigate SPF flattening, but not sure how other have dealt with this, or what experience others have with record flattening. As part of MxToolbox Delivery Center, we automatically detect the sources that are sending email on behalf of your domain. The . Broken SPF records waste marketing dollars and defeat your organization’s security. SPF Flattening. Inspect any domain's SPF record and learn how to fix it. net ~all . Next, go to the ‘add DNS TXT record’ option. An SPF flattening tool is the recommended solution to prevent broken SPF by keeping your lookup limit in check at all times. Each Manual flattening basically means evaluating your desired SPF record converting all the hostnames into IP addresses along the way. Use our DMARC checker to see if a domain has a valid policy. Rather than SPF flattening being a feature of a larger and more expensive suite of software we have designed AutoSPF to solve just one issue. It provides a simple, intuitive system to help manage your complex SPF configurations. An SPF record is a DNS TXT record containing a list of the IP addresses that are allowed to send email on behalf of your domain. Lastly, you can click on the third tab to conduct an SPF raw checker. Det kan være nyttigt til fejlfinding og komprimering af SPF-poster. The idea of a dynamic SPF record can be several things, such as dynamically flattening a record, then publishing the result based on a data source. Reducing Risks of Misconfigurations. ABOUT SPF RECORD CHECK. com include:_spf. Use this tab to create an SPF record. paul. SPF Manager treats the SPF open standard as defined by the RFC. Check IP addresses: If the SPF authentication fails for a specific IP address, verify that the IP address is authorized to send emails on behalf of the domain. It makes the distinction between a DMARC domain and an SPF domain which delivers the correct SPF entries at the right place in your DNS. Email has security standards to control which senders are allowed to send email for your domain. Mechanism like ip4 and ip6 are added verbatim, as these don't consume any DNS lookups. Enter your SPF policy details (not the one shown in the example below) and use an address in your domain. Example: If your previous SPF record was v=spf1 include:_spf. org is used for testing now. PowerSPF is a one-click auto SPF Record with unlimited lookups that never fails the 10 DNS Lookup limit! An Automatic SPF flattening approach to your Sender. google. “DNS lookups count “12” exceeds maximum limit of 10, which will result in a “permerror” and SPF authentication failure. net ~all. You need to check echoworx's SPF record and determine where your mail is coming from, because it looks like they are the main offender when it comes to lookups, just their include alone is 5 lookups. There is an inherent problem with manual SPF flattening because the mailbox providers may add. This test will connect to a mail server via SMTP, perform a simple Open Relay Test and verify the server has a reverse DNS (PTR) record. Write the name of the domain as the Host. Contact us via Email, Phone, or TicketThe procedure for SPF flattening is quite simple. It checks for syntax errors, validates the record's elements, and checks for previously published SPF records. autospf. The graphical view allows people to quickly identify which servers are authorized to send on behalf of a domain. ; r53spflat can update the SPF TXT records in Amazon Route53; r53spflat was adapted from cfspflat - which provides the same capability for Cloudflare DNS; SPF Flattening. Each time they replace a modifier, the SPF. Our SPF record testing tool also advises on optimizing the. This ensures that your record is short, crisp, and valid. In the default policy parameters, view the Security Features section. GDPR COMPLIANT; DuoCircle LLC 5965 Village Way Suite 105-234 San Diego, CA 92130;SPF or Sender Policy Framework requires DNS records with the respective servers sending email listed. Note that for the tool to be useful you *must* have at least a full week of DMARC. Create a new TXT Record. Bonita Fierce is one of our favorite Latino-owned businesses, and NBC Select updates editor. net This is my existing SPF record: Email that is Aligned but not properly Authenticated indicates that one or more email senders are missing from your SPF records, or that your SPF records are too large and violate SPF include rules. During the lookup process, the SPF record is retrieved from the sender’s domain’s DNS. In accordance with RFCs, DNS Made Easy. Also, you can reduce the number of DNS-querying mechanisms/modifiers to 1 by using a flattened SPF record. 1 Like. 5. You may also check each MX record (IP Address. This allows SPF authentication to avoid looking up DNS records altogether since your email server simply provides the actual IP address from the start. You manually take each included record, parse them out, remove duplicates and create a new SPF record. 🔥 Universal SPF 🔥 Remove DNS lookups and fix policy errors in seconds. Are you confident your email is getting through? MxToolbox is YOUR expert on email deliverability. Single step setup. When the hashsum of your IP Addresses changes, it will send out an email (or just dump HTML if it can't find an email server) with a handy diff & BIND format for viewing what has changed, and promptly updating it. You will need to add the missing senders to your SPF record or use an SPF Flattening tool. com include:spf1. Click Test SPF Record. If you are looking for an SPF flattening tool you already know what SPF flattening is. This standard is all about e-mail security. Remove obsolete email sources from your DNS. SPF is the cornerstone of your email delivery strategy. You can use our SPF flattening tool to optimize your record automatically that never exceeds the 255 character SPF record length limitHow does SPF record flattening help overcome the 10 DNS lookup limit. SPF Wizard. An SPF flattening tool reduces the instances of errors by compressing all authorized sources into a single, comprehensive, inclusive, yet simplified record that takes care of misconfigurations. An SPF record starts with v=, telling the readers and the DNS which version of the SPF is being used. SPF errors are widespread because simple tasks like activating new email vendors can overflow and. For Enterprise users, SPF delegation is an optional add-on. "SPF flattening" is one solution to the SPF search boundary. The article has a 'SPF Record Flattener' at the bottom of the page showing examples of this. g GoDaddy. Exceeding the SPF record length limit of 255 characters. MxToolbox's SPF Flattening Tool provides you with a simple, intuitive system to help manage your complex SPF configurations. Require the SPF record in the DNS so that it can validate it. All SPF records must begin with v=SPF1 and end with the ‘all’ tag. Tools. This test will lookup an SPF record for the queried domain name, display the SPF Record (if found), and run a series of diagnostic tests (SPF Validation) against the record, highlighting any errors. You could theoretically extract the flat IP records from the resulting JSON file and automatically update your DNS configuration. An SPF record is a line of text published in the DNS that contains the list of authorized IP addresses from which email can be sent for the domain. (Truncated at 100k IPs reported per-source. Use an automated service that flattened the record and then keeps it updated. 2 watching Forks. SPF/DKIM/DMARC deployment tools fall into 2 categories: generators (creators/builders) to generate records and checkers (validators/testers) to look up the DNS. Enter your domain in the ‘Host value’ field. You should add this DNS record to. Model # 4141455. It is very common for organizations, when constructing or modifying their SPF record, to run up against the 10 DNS lookup limit. Fully scalable from SMB to enterprise with a budget-friendly price. Simple enter your SPF record, click the Check SPF Record button, then scroll down to the Flattened SPF record section below to find the flattened SPF record. SPF record flattening, as the name indicates, is a process to sort of "flatten" the hierarchy in an SPF record so that the flattened record contains fewer than 10 DNS lookups. Broken SPF records waste marketing dollars and defeat your organization’s security. When a domain name is listed in an SPF record, that tells receiving mail servers. DMARC records when configured in the right way can benefit you in more ways than one. 2. Click Mail Policies > Mail Flow Policy. 123 a -all”Navigate to your domain section and publish the following SPF record: v=spf1 include:_netblocks. For the most part, our advice for th. Outbox Protection. And you can see down the page that the resolution of their. If you don't, you probably don't need one yet. Upgrade for Live Support. In an attempt to reduce the number of DNS lookups occurring against our DNS SPF record I have written a PowerShell script which will extract out all of the allowed IP addresses from a SPF netblock (i. RFC 4408 § 10. ourDomainName. SPF flattening is a process of converting an SPF record into a format that can be more easily read and understood by humans. When using PowerDMARC’s SPF Flattening tool, we’ll generate a valid SPF record for you with all of your hosts and IP addresses included in one single line of text. universalspf. There are potentially several reasons for low SPF Pass Rates for Verified Sources: Spoofing – A malicious actor is trying to use your domain to legitimize their spam or malware. We check for common errors such as using more than the 10 allowed DNS lookups. SPF Flattening. If this limit is exceeded, the implementation MUST. MxToolbox's SPF Flattening is automatic and adaptive, enabling you to specify new Verified Email Sources and to have a new SPF record almost instantaneously. The following SPF terms cause a DNS lookup: include; a; mx; ptr; exists; redirect; Each time these terms are found within an SPF record and within the SPF records of any nested includes and redirects, it counts towards the 10-lookup limit. 1. And for your SPF policy to be effective, it has to be implemented properly on multiple hosts and IP addresses. We are proud to introduce our SPF Flattening Tool 👌. if you dont have an SPF you could. Where are Flattened SPF records DNS hosted? SPF Record too Long at your Registrar. The end result is a simple SPF record for google. 同一ドメインのDNSに複数のSPFレコードが発行されている. Award winning e-mail security and monitoring software for Microsoft Exchange and IIS. The SPF checker calculates the number of DNS lookups in your SPF record, and warns you if your record exceeds that limit. Spoofing is the unauthorized use of email by forging a domain name or address. you have published the SPF record. Sender Policy Framework, ou SPF, é um protocolo de autenticação de correio electrónico amplamente aclamado que valida as suas mensagens, autenticando-as contra todos os endereços IP autorizados registados para o seu domínio no seu registo SPF. SPF flattening is het proces waarbij een SPF record wordt omgezet in een formaat dat minder dan 10 DNS lookups bevat. org is used for testing now. You can use an SPF flattening service or subdomains for different services to resolve the problem. SPF record flattening can be an easy answer, but is not the. net. Put the most important 10 lookups in the SPF record and rely on DKIM for the rest for DMARC. outlook. Essentially, these services employ method #2, but do some backend work every few hours to check and update the IP addresses. Organizations such as PowerDMARC have developed tools that enable automatic SPF flattening. As part of MxToolbox Delivery Center, we automatically detect the sources that are sending email on behalf of your domain. The current SPF record configuration needs to be. Additional information regarding this can be found here. Put the most important 10 lookups in the SPF record and rely on DKIM for the rest for DMARC. SPF errors are widespread because simple tasks like activating new email vendors can overflow and. 2. SPF record flattening. com include:spf2. I think the correct answer is: v=spf1 +a +mx include: spf. We define our spf records once (with good comments), and select which records we want flattened out (it can be tricky to fit everything so that it fits in one record and is all under 10 records. So to avoid 'unreasonable load' on the validator, RFC7208 section 4. The only way to stay under the 10 maximum is to drop something. The more services and third-parties that send on your behalf, the more complicated and bloated your record can become. ” Flattening is simply replacing all the domains in the SPF record with their IP addresses, which eliminates the need for DNS lookups. When you do an SPF lookup of the record in DNS, you will find: v=spf1 include:_sampledomain. SPF Record Check. It is a feature of. MxToolbox Delivery Center Plus provides detailed information on: Who is. Here to help you. The “SPF record flattening” procedure is as follows: Get the IP addresses for each of the DNS-querying mechanisms/modifiers used in the record by querying the DNS. Make sure you remove redundant, repeated, and NULL mechanisms within your SPF record which also adds to the character limit. The lookup count includes sub-lookups (it's recursive. v=spf1: v=spf1 is the standard way that most SPF record lines of TXT begin. One of our favourites, that much is clear! The SPF Record Check tool (aka SPF Checker) allows you to inspect the validity of your DNS record. Testing SPF Records. Everything is essentially squeezed into an include. The increasingly widespread use of SaaS email service providers such as Exchange Online, G-Suite, Amazon SES, SendGrid and others is a challenge for email administrators. This ensures that your SPF record is always less than that 10 DNS lookup limit to avoid hitting the SPF hard limit. zoho. Hostname or IP ABOUT DNS PROPAGATION CHECK. Gmail: 4/10 records; Salesforce: 8/10 records; Office 365: 2/10 records; Additional third-party tools and platforms add even more records. SPF record generator to help with email delivery problems. Access your DNS management console. With SPF delegation, your records are compressed, and sometimes even your email providers are hidden from mail transfer agents to prevent SPF lookup failure. The SPF checker calculates the number of DNS lookups in your SPF record, and warns you if your record exceeds that limit. Manual SPF Flattening requires understanding all the lookups in your vendors SPF includes. That’s why we’re launching Universal SPF, an in-line upgrade to traditional SPF. 1. Your SPF records will be constantly. In those days, they already saw the need for specifying what you want to happen with messages that fail the test. If you are looking for an SPF flattening tool you already know what SPF flattening is. To run an SPF check, enter the domain in question, and it will fetch the SPF record (if any) from the DNS. As an integral part of email cybersecurity, SPF enables the receiving mail server to check whether incoming email comes from a domain authorized by that domain’s administrators. 2. EasyDMARC SPF Checker: This is a free online tool that checks the SPF record of a domain and provides a detailed report on the status of the SPF record. I’m leaning toward option #6 and have been searching around. Pointing SPF to Valimail will not change the contents of the SPF record on the domain you perform the pointing for, this action just means 2 simple things: 1. Therefore, you should use a flattened SPF record as a workaround. protection. SPF records usually contain ‘include’ statements that refer to other domains' SPF records. That’s why we’re launching Universal SPF, an in-line upgrade to traditional SPF. Loads flattened SPF records from AutoSPF's API and inserts them into a PowerDNS zone via the PowerDNS API. What is SPF record splitting? When a DNS TXT exceeds 255 characters, then it must be split into multiple strings. No charge for phishing attacks, or invalid mails sent on your behalf.