Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Querying my domain I get:

The TXT records found for your domain are:
v=spf1 ip4: a ~all 

So superficially it appears OK. However I also get the following message

SPF records should also be published in DNS as type SPF records.
No type SPF records found.

I want to make sure things are absolutely airtight. So in addition to TXT records I also want a pure SPF record. However I cannot figure out the format. Placing the same text in an SPF record does not seem to work.


At the moment I have a TXT record but not SPF record. When I cut and paste from TXT straight to SPF I get some type of crazy recursive DNS error so quickly deleted the SPF. I just want to know the correct format. Copying

v=spf1 ip4: a ~all 

straight into an SPF record doesn't work.

share|improve this question
May I just in passing praise the original poster here? This is an excellent example of why the unending tendency to redact identifying content from questions on SF is seriously annoying. If he'd edited his SPF record so it just said , neither of the two cogent answers I already see below could have been posted. Yes, sometimes stuff is confidential and needs redacting, but I believe it's way overused around these parts, to the detriment of all. – MadHatter Jan 28 '11 at 8:18
up vote 7 down vote accepted

That SPF record looks correct to me, mine is quite similar to that.

Where do you get the SPF error? I checked the domain from my SPF client and it says it's okay.

You can always check the syntax here and generate a new header here

$ spfquery -i -m -h
Please see contains
spfquery: domain of designates as permitted sender
Received-SPF: pass (spfquery: domain of designates as permitted sender) client-ip=;;;
share|improve this answer
+1 for the links. It's a very clear and useful tool for creating SPF records. – Lekensteyn Jan 28 '11 at 13:52

If you are trying to add an SPF record in addition to the usual TXT record, the format is exactly the same. However, you need to use a version of BIND that supports SPF record types, i.e. 9.4.0 or later.

If your DNS software lacks support for "true" SPF records, I wouldn't worry about it. This record type is fairly new and you certainly won't need it for compatibility within the next 10 years or so. :)

share|improve this answer
This is the only answer (with just one +1) that address the question!!! – Alejandro Angelico Sep 19 '11 at 17:57

Did you just set the spf record? if so the other side's dns server might be caching your old zone without the spf record. So just wait a day and then try.

I went to and you passed.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.