Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Say that I want to send mail from my own servers at

As I understand it, I can specify the following SPF record and have any server addressed by an A record under included by the SPF record. So evaluation of mail sent from, would result in a pass:

v=spf1 a ~all

If however I am using an outsourced mail sender say, I would use an SPF record like this:

v=spf1 ~all

My main question is - If sends mail from servers at,, do I need to include additional SPF records for these servers, or are they captured by the above SPF record?

Also, if I do need to include additional records, how would I find out what their mail servers are? NSLOOKUP domain transfer attempts are blocked by most DNS servers.

share|improve this question
up vote 3 down vote accepted

The include clause in your SPF record fetches the corresponding SPF record from and includes that in-line in your record. So assuming that wesendmail configures their record correctly, you don't need to do anything further.

share|improve this answer
I think this is an excellent answer, but would add a caveat that SPF is completely pointless if you finish with ~all. You can find big-time sysadmins on SF who treat ~all as grounds for rejection. If you're going to bother with SPF at all, please fully-enumerate your sending servers, and finish up with -all. – MadHatter Jun 4 '13 at 8:52
Your comment regarding ~/- is backed up here – gb2d Jun 4 '13 at 9:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.