Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am looking to setup a TXT spf record that has 2 included domains... individually:

v=spf1 include:_spf.google.com ~all

and

v=spf1 include:otherdomain.com ~all

What is the proper way of combining them into a single item?

share|improve this question
add comment

4 Answers

up vote 21 down vote accepted

v=spf1 include:_spf.google.com include:otherdomain.com ~all

There's no restriction against including multiple names in a single entry; Hotmail, for instance, takes this to extremes. Note that multiple includes, or nested ones, need to stay under the limit of 10 total DNS lookups for the whole SPF check.

share|improve this answer
    
RFC 4408 §10.1: SPF implementations MUST limit the number of mechanisms and modifiers that do DNS lookups to at most 10 per SPF check, including any lookups caused by the use of the "include" mechanism or the "redirect" modifier. –  mr.spuratic Feb 26 at 10:48
1  
@mr.spuratic Good point - that was poor wording, as I was trying to say "you can do greater than one." Edited. –  Shane Madden Feb 26 at 17:49
add comment

v=spf1 include:_spf.google.com include:otherdomain.com ~all

share|improve this answer
add comment

What is the difference between ~all and -all?

If I have one domain that requires ~all and the other requires -all, which one should I use when I combine them?

share|improve this answer
2  
You really should post new questions on their own page, but here is the answer: "+" = Pass. "-" = Fail. "~" = SoftFail. "?" = Neutral. Fail means the mail should be rejected, SoftFail means the receiver shouldn't reject it but mark it with a spam warning. SoftFail is only intended to be used temporarily while changing your setup. –  Martin Ørding-Thomsen Feb 4 '13 at 8:51
add comment

It look like you can merge both together into one entry. Lenovo.com appears to be an example of this.

share|improve this answer
    
Their current SPF record is "v=spf1 include:spf.messagelabs.com ~all v=spf1 mx/24 mx:include:ibm.com/24 ~all" Can you explain what you mean? –  flickerfly Mar 7 at 20:12
    
Perform a "nslookup -type=txt lenovo.com" (without the quotes) and it should be self-explanatory. –  user48838 Mar 10 at 6:09
    
It's as the OP was looking for in a - "spf record that has 2 included domains..." –  user48838 Mar 10 at 6:17
    
Okay, I thought you meant one include statement like "include:spf.messagelabs.com,include:ibm.com" –  flickerfly Mar 10 at 12:10
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.