Check DNS SPF Records

Sender Policy Framework (SPF) records are used specify who is allowed to send email for a domain.

Historically, SPF records could be published using the SPF and/or TXT resource record types (see RFC 4408. This changed with RFC 72089, which specifies that SPF records must be published as TXT resource records only.

DNS Check supports monitoring both the TXT and SPF resource record types:

SPF Record Check

Fields

Here are the fields that make up an SPF record:

Field Description Example
Name A fully qualified domain name (FQDN). legacy.dnscheck.co.
Type The DNS record type. Always set to "SPF". SPF
Value A string of text "v=spf1 include:sendgrid.net include:windserve.com include:spf.mandrillapp.com -all"

DNS Zone File Examples

Here's an example of how an SPF record which uses the example values from this page's Fields section looks in a DNS zone file:

; Name           Type  Value
legacy.dnscheck.co.     SPF   "v=spf1 include:sendgrid.net include:windserve.com include:spf.mandrillapp.com -all"

The Name ends in a period in the above example, so it's a fully qualified domain name.

Alternatively, you can create an SPF record that's relative to the zone file's $ORIGIN. Here's an example of how to do this using the example values from this page's Fields section:

$ORIGIN dnscheck.co.
; Name           Type  Value
legacy           SPF   "v=spf1 include:sendgrid.net include:windserve.com include:spf.mandrillapp.com -all"

Additional Resources



Sign Up For a Free Account




Free accounts can check up to 10 DNS records at a time. You can always upgrade to a paid account later.