SPF record checker
SPF checker: read a domain’s SPF record, list its mechanisms en count the DNS lookups against the limit 10.
Queries go tot Cloudflare’s public DNS over HTTPS service when you press the button. Up tot 15 queries are made tot follow include records.
Over SPF record checker
SPF checker: read a domain’s SPF record, list its mechanisms en count the DNS lookups against the limit 10.
Onderdeel van de sectie “Data en netwerken” van SmartCalcy. Werkt in je browser zonder account, gebruikt je eigen valuta en eenheden (te wijzigen bovenaan de pagina) en geeft schattingen alleen ter informatie, dus controleer officiële richtlijnen voordat je op een resultaat vertrouwt.
Zo gebruik je de SPF record checker
Wat het berekent en wanneer je het gebruikt
Reads a domain’s SPF record, the list servers allowed tot send email voor it, en checks it voor common faults: more than one record, a missing “all” policy, en more than 10 DNS lookups, which makes SPF fail. It follows include records tot count the lookups.
Zo gebruik je het, stap voor stap
- Enter the domain, voor Voorbeeld Voorbeeld.com.
- Press “Check SPF”.
- Read the verdict en the number DNS lookups used out 10.
- Review the mechanisms list en elke warnings.
Wat elk invoerveld betekent
- Domain Naam – The domain used in the sender’s address.
Zo lees je de resultaten
- Verdict – Looks valid, of Needs attention when a problem is found.
- Policy – What happens tot mail from servers that are not listed: hard fail, soft fail, neutral of allow.
- DNS lookups – Lookups needed by bevat, a, mx, ptr, exists en redirect terms, compared with the limit 10.
- Mechanisms – Every Looptijd in the record, with included records indented beneath their parent.
De formule
The record is the TXT Waarde starting v=spf1. Per stuk bevat, a, mx, ptr, exists of redirect term costs one DNS lookup, en included records add their own. ip4 en ip6 terms en “all” cost none. The RFC limit is 10 lookups.
Een rekenvoorbeeld
v=spf1 bevat:_spf.Voorbeeld.net a mx -all uses three lookups voor its own terms plus those inside the included record, en ends in -all, so unlisted servers are rejected.
Aannames en beperkingen
- Voor most 15 queries are made while following includes, en nesting stops na 5 levels.
- A domain may need a record only voor mail it sends. Domains that send Nee mail should publish v=spf1 -all.
- The check does not test whether a particular server would pass.
Veelgemaakte fouten
- Publishing two SPF records. Only one is allowed, so merge them into one.
- Ending with +all, which lets anyone send as your domain.
- Adding every email service as an bevat en passing 10 lookups, which omwentelingen SPF into a permanent error.
Veelgestelde vragen
What is SPF?
Sender Policy Framework is a DNS record that lists the servers allowed tot send email voor a domain.
What is the difference tussen -all en ~all?
-all asks receivers tot reject unlisted senders. ~all asks them tot accept but mark the mail as suspicious.
Why is there a limit 10 lookups?
It stops a record van forcing receivers into lang chains DNS queries. Going overschreden it makes SPF return a permanent error.
Is SPF enough tot stop spoofing?
Nee. Use it with DKIM en DMARC.
Does this tool send email?
Nee. It only reads DNS records.