Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm finally fixing up my dns zone files in Gandi, which has a handy feature that lets me use the same zone file for several domains. So I can keep 1 zone file for a single domain and all its tld's.

But normally, when you set up the SPF record for eg, you don't actually add "", because it's implied.

Will this thrown an error if you do?

Here's an example SPF record for

The "correct" one:

v=spf1 mx ~all

And here's the one I would like:

v=spf1 mx ~all

Is that allowed, or not?

share|improve this question
You should consider switching "~all" to "-all". That tilde lets everyone know you don't really know what you're configuring and some servers (like the ones I run) will hold it against you when raking your e-mail for spam. – Chris S Aug 10 '12 at 2:10
Ah thanks, I'll look into it! – skerit Aug 10 '12 at 18:27
up vote 6 down vote accepted

It's not implied. There's nothing implicitly assumed about what systems you want to authorize.

You're explicitly setting by setting mx at the start of the record - they're functionally identical when the SPF entry is on

That said, you should not run into any validation errors simply because you specify the same thing twice.

share|improve this answer
+1 But note that only 255 characters can be in a single SPF record... So if you own for every TLD you'll run into problems. But that's somewhat unusual. – Chris S Aug 10 '12 at 2:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.