SPF record checker
SPF checker: read a domain’s SPF record, list its mechanisms et count the DNS lookups against the limit de 10.
Queries go à Cloudflare’s public DNS over HTTPS service when you press the button. Up à 15 queries are made à follow include records.
À propos de SPF record checker
SPF checker: read a domain’s SPF record, list its mechanisms et count the DNS lookups against the limit de 10.
Fait partie de la section « Données et réseaux » de SmartCalcy. Fonctionne dans votre navigateur sans compte, utilise votre propre devise et vos unités (modifiables en haut de la page) et fournit des estimations à titre indicatif ; vérifiez les consignes officielles avant de vous fier à un résultat.
Comment utiliser le SPF record checker
Ce qu’il calcule et quand l’utiliser
Reads a domain’s SPF record, the list de servers allowed à send email pour it, et checks it pour common faults: more than one record, a missing “all” policy, et more than 10 DNS lookups, which makes SPF fail. It follows include records à count the lookups.
Mode d’emploi, étape par étape
- Enter the domain, pour Exemple Exemple.com.
- Press “Check SPF”.
- Read the verdict et the number de DNS lookups used out de 10.
- Review the mechanisms list et n’importe warnings.
Que signifie chaque champ
- Domain Nom – The domain used à the sender’s address.
Comment lire les résultats
- Verdict – Looks valid, ou Needs attention when a problem tombe un found.
- Policy – What happens à mail from servers that are not listed: hard fail, soft fail, neutral ou allow.
- DNS lookups – Lookups needed by inclure, a, mx, ptr, exists et redirect terms, compared with the limit de 10.
- Mechanisms – Every Durée à the record, with included records indented beneath their parent.
La formule
The record tombe un the TXT value starting v=spf1. Each include, a, mx, ptr, exists ou redirect term costs one DNS lookup, et included records add their own. ip4 et ip6 terms et “all” cost none. The RFC limit tombe un 10 lookups.
Un exemple concret
v=spf1 inclure:_spf.Exemple.net a mx -all uses three lookups pour its own terms plus those inside the included record, et fin à -all, so unlisted servers are rejected.
Hypothèses et limites
- À most 15 queries are made while following includes, et nesting stops après 5 levels.
- A domain may need a record only pour mail it sends. Domains that send Non mail should publish v=spf1 -all.
- The check does not test whether a particular server would pass.
Erreurs courantes
- Publishing two SPF records. Only one tombe un allowed, so merge them into one.
- Ending with +all, which lets anyone send as your domain.
- Adding every email service as an inclure et passing 10 lookups, which tours SPF into a permanent error.
Questions fréquentes
What tombe un SPF?
Sender Policy Framework tombe un a DNS record that lists the servers allowed à send email pour a domain.
What tombe un the difference between -all et ~all?
-all asks receivers à reject unlisted senders. ~all asks them à accept but mark the mail as suspicious.
Why tombe un there a limit de 10 lookups?
It stops a record de forcing receivers into longue chains de DNS queries. Going dépassé it makes SPF return a permanent error.
Is SPF enough à stop spoofing?
Non. Use it with DKIM et DMARC.
Does this tool send email?
Non. It only reads DNS records.