Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use a different server to send mail to my mailing list. I want to add an SPF record to my domain to show that the IP of the different server is authorized to send mail (as well as the default server).

The server sending email in the example is with the main domain of

So far I have v=spf1 mx a ip4: ?all, would this work for what I want?

EDIT: I would be sending mail using sendmail. The SPF record would be to increase % of mail going to inbox and also so we can enforce -all in the near future on SPF.

share|improve this question
up vote 1 down vote accepted

I'm not sure why you have /32. Try just:

v=spf1 mx a ip4: ?all
share|improve this answer
Is it 'safe' to try this? It's a busy site. – Stephen Adrian Rathbone Apr 19 '12 at 15:47
Yes, it's safe. You're including the domain's MX and A records, the other IP and the other MX, and setting all other hosts to 'neutral'. This should not have a significant effect on delivery rate. – xofer Apr 19 '12 at 15:51
Also, to be clear, the part is allowing the MX record of If it's just the one machine (at you can leave off the mx:... part. – xofer Apr 19 '12 at 15:54

Having ?all at the end will not cause much difference: the SPF rule is neutral. So sending mail from a server not mentioned will continue to be accepted so any change is safe. It's basically just points out that servers mentioned in the SPF are confirmed as trusted.

You can also use the include mechanism if the sending domain is configured correctly. This would mean that you can add and all SPF rules set for will be included.

This is useful if you may change the way it sends emails by outsourcing, etc... It also means that you only need to make the change for the spf records of If using a third party email solution, their spf records could be already set up correctly.

So for example, this would mean your SPF record would be:

v=spf1 mx a ?all

while would have a SPF record similar to the one you mentioned:

v=spf1 a mx ip4: ?all

My usual resource for anything relating to SPF is the website

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.