SPF record generator

Required version. Every SPF record starts with v=spf1. Future versions may use v=spf2, etc.

Fetches the SPF record of another domain. Use for third-party senders (e.g. include:_spf.google.com for Gmail, include:sendgrid.net for SendGrid). Keeps your record short and lets the provider update their rules.

Allow specific IPv4 or IPv6 addresses or CIDR ranges. ip4:192.168.1.1 or ip4:203.0.113.0/24, ip6:2001:db8::/32. Use for your own mail server IPs.

Allow the IP(s) of the A record(s) for the domain. a = current domain; a:mail.example.com = allow A record(s) of mail.example.com.

Allow the IP(s) of the MX host(s). mx = current domain's MX; mx:other.com = MX hosts of other.com. Useful when your MX servers also send mail.

Replace your record with another domain's SPF. Your record becomes v=spf1 redirect=example.com. The other domain must have a valid SPF. Use when another party fully defines who can send for you.

Default result for mail that doesn't match any mechanism. -all = hard fail (reject); ~all = soft fail (accept but mark as suspicious); ?all = neutral; +all = pass (allow all — not recommended). Use -all for strict policy.