Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Let's say I have three domains:

For each, I have the following SPF records:
v=spf1 ip4:x.x.x.x ip4:y.y.y.y ~all
v=spf1 ip4:c.c.c.c ip4:d.d.d.d ~all
v=spf1 ip4:.e.e.e.e ip4:f.f.f.f ~all

Now, I am sending my email from following domains:

MFROM (return-path): PRA (from):

For these two domains, I have following SPF:
v=spf1 ~all

When I test this structure through SPF test tools, it passes. But I wonder if adding "a" and "mx" to the SPF record of, and will increase Hotmail/Yahoo/Gmail/AOL inbox delivery success.

Any ideas/suggestions?



share|improve this question
up vote 2 down vote accepted

That's.. convoluted. A device wishing to validate SPF on one of the test domains will need to do four different record lookups; I would not be surprised if some of the MTAs in use by those organizations capped their lookups to something lower.

Why not just keep it simple, and avoid having to ask yourself if service providers will put up with your numerous includes?
v=spf1 ip4:x.x.x.x ip4:y.y.y.y ip4:c.c.c.c ip4:d.d.d.d ip4:e.e.e.e ip4:f.f.f.f ~all
v=spf1 ip4:c.c.c.c ip4:d.d.d.d ip4:e.e.e.e ip4:f.f.f.f ~all
v=spf1 ip4:e.e.e.e ip4:f.f.f.f ~all
share|improve this answer
Thanks for your answer. You're right. I am going to merge all SPF's into one big SPF on – Willy Apr 29 '11 at 14:48
but what about "a" and "mx" parameters in the SPF record. Should I also add them? – Willy Apr 29 '11 at 14:48
If the host definitions that you have already cover the senders that need to be authorized, then there's no need; the ip4 rules are sufficient. – Shane Madden Apr 29 '11 at 15:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.