My current SPF record is as follows:
v=spf1 mx include:servers.mcsv.net include:xero.com -all
The above cause the SPF validation to fail.
Using http://mxtoolbox.com/SuperTool.aspx?action=txt, I can breakdown the lookups as follows:
** Mailchimp SPF **
servers.mcsv.net
v=spf1 include:spf1.mcsv.net include:spf.mandrillapp.com ?all
*spf1.mcsv.net*
v=spf1
ip4:72.26.195.64/27
ip4:74.63.47.96/27
ip4:173.231.138.192/27
ip4:173.231.139.0/24
ip4:173.231.176.0/20
ip4:205.201.128.0/20
ip4:198.2.128.0/18 ?all
*spf.mandrillapp.com*
v=spf1
ip4:198.2.128.0/24
ip4:198.2.132.0/22
ip4:205.201.131.128/25
ip4:205.201.134.128/25
ip4:205.201.136.0/23
ip4:205.201.139.0/24 ?all
** xero.com SPF **
xero.com
v=spf1
ip4:162.209.71.30/32
ip4:72.32.169.144/32
ip4:173.203.14.40/32
ip4:65.61.179.172/31
ip4:72.3.200.184/31
ip4:72.3.177.184/31
ip4:173.203.14.42/32
ip4:198.61.155.105/32
ip4:204.232.255.75/32
ip4:202.55.99.60/32
ip4:119.9.16.210/32
include:_spf.elasticemail.com
include:cmail1.com
include:_spf.google.com ~all
Can I strip out the IP addresses and add them to my own as below or would the SPF fail for excessive length or excessive IP addresses?
v=spf1 mx ip4:72.26.195.64/27ip4:74.63.47.96/27 ip4:173.231.138.192/27 ip4:173.231.139.0/24 ip4:173.231.176.0/20 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:205.201.131.128/25 ip4:205.201.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:162.209.71.30/32 ip4:72.32.169.144/32 ip4:173.203.14.40/32 ip4:65.61.179.172/31 ip4:72.3.200.184/31 ip4:72.3.177.184/31 ip4:173.203.14.42/32 ip4:198.61.155.105/32 ip4:204.232.255.75/32 ip4:202.55.99.60/32 ip4:119.9.16.210/32 -all
The above looks really clunky though, are there any other ways to reduce the number of look-ups, perhaps by creating my own SPF sub records for the servers that are known to send email (and check these regularly)?
_accounts-spf.mydomain.com
v=spf1 ip4:162.209.71.30/32 ip4:72.32.169.144/32 ip4:173.203.14.40/32 ip4:65.61.179.172/31
ip4:72.3.200.184/31 ip4:72.3.177.184/31 ip4:173.203.14.42/32 ip4:198.61.155.105/32 ip4:204.232.255.75/32 ip4:202.55.99.60/32 ip4:119.9.16.210/32 ?all
_list-spf.mydomain.com
v=spf1 ip4:72.26.195.64/27 ip4:74.63.47.96/27 ip4:173.231.138.192/27 ip4:173.231.139.0/24 ip4:173.231.176.0/20 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ?all
Then the master record that includes the sub records...
mydomain.com
v=spf1 mx include:_accounts-spf.mydomain.com include:_list-spf.mydomain.com
What is the recommended way please?