Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is my SPF record:

v=spf1 a ip4:111.222.333.444 ~all 

I sent a test email to my Gmail address and below are the headers. I replaced real IP address with 111.222.333.444 and I replaced server hostname with

My question is: why headers say that IP address 111.222.333.444 "is neither permitted nor denied"? This IP address is included in SPF record and should be "permitted". It's not a DNS caching problem.

Received: from (
[111.222.333.444])by with ESMTPS id h20si450242faa.105.2011.
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 25 Oct 2011 23:56:17 -0700 (PDT)
Received-SPF: neutral ( 111.222.333.444 is neither permitted 
nor denied by best guess record for domain of 
share|improve this question
Is this the SPF record for (i.e. not – nickgrim Oct 26 '11 at 9:39
If you want proper troubleshooting on this, you will need to give the domain name you are having trouble with. – dunxd Oct 26 '11 at 11:56
Without real domainname and IP of sender all others is useless chat – Lazy Badger Oct 26 '11 at 14:06

Without any real data, your record is impossible to validate. Try using some SPF testing tools to check for possible problems.

share|improve this answer
syneticon-dj, I already tried. The record is valid and this tool didn't find any problems. – lars Oct 26 '11 at 8:46

Is the record actually returned by queries to the mail domain's DNS with type TXT? Can you provide the output of an nslookup for that name, sanitizing private details?

Google's using "best guess", which means it didn't find the record in your DNS, or couldn't parse what it did find - this is what needs to be fixed. Your record's syntax is fine, but it's all for naught if the record isn't returned when an SPF client asks for it.

share|improve this answer

Make sure that you enter your spf record in the DNS zone files,and also chaeck your syntax of spf record it might not be correct,try the

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.