How to include multiple domains in an spf TXT Record

domain-name-system spf txt-record

360,090

v=spf1 include:_spf.google.com include:otherdomain.com ~all

There's no restriction against including multiple names in a single entry; Hotmail, for instance, takes this to extremes. Note that multiple includes, or nested ones, need to stay under the limit of 10 total DNS lookups for the whole SPF check.

360,090

tgriesser

http://github.com/tgriesser

Updated on September 18, 2022

Comments

tgriesser almost 2 years
I am looking to setup a TXT spf record that has 2 included domains... individually:
```
v=spf1 include:_spf.google.com ~all
```
and
```
v=spf1 include:otherdomain.com ~all
```
What is the proper way of combining them into a single item?
- Tanvir about 6 years
  
  can anyone tell me what this ?all mean, sometimes they have this sign ~all
mr.spuratic over 10 years

RFC 4408 §10.1: SPF implementations MUST limit the number of mechanisms and modifiers that do DNS lookups to at most 10 per SPF check, including any lookups caused by the use of the "include" mechanism or the "redirect" modifier.
ravi yarlagadda over 10 years

@mr.spuratic Good point - that was poor wording, as I was trying to say "you can do greater than one." Edited.
flickerfly over 10 years

Their current SPF record is "v=spf1 include:spf.messagelabs.com ~all v=spf1 mx/24 mx:include:ibm.com/24 ~all" Can you explain what you mean?
user48838 over 10 years

Perform a "nslookup -type=txt lenovo.com" (without the quotes) and it should be self-explanatory.
user48838 over 10 years

It's as the OP was looking for in a - "spf record that has 2 included domains..."
flickerfly over 10 years

Okay, I thought you meant one include statement like "include:spf.messagelabs.com,include:ibm.com"
k1DBLITZ over 9 years

Do you have to use the word include each time? Would this be a valid format? (minus the fake domain and internal address space) "v=spf1 include:www.domain.com ip4:10.10.10.0/24 ip4:10.10.100.0/24 a -all" I checked it against kitterman.com/spf/validate.html and it said it was valid.
ravi yarlagadda over 9 years

@k1DBLITZ Yes, that's valid - include is just for when you're using records from another domain.
Tanvir about 6 years

can anyone tell me what this ?all mean, sometimes they have this sign ~all