This question already has an answer here:

I've found that our current DNS SPF record uses the ~all keyword, but in most examples I've seen -all used.

What's the difference between the two?

marked as duplicate by Michael Hampton Jan 28 '15 at 16:47

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


The tilde and dash identify they different types of failures. Consider a message that doesn't match the parameters specified in the SPF record. Tilde is for a softfail, the message will be accepted and marked if it doesn't match parameters specified. Dash is for a hardfail, the message will be rejected if it doesn't match.

more info here:http://support.microsoft.com/kb/2640313

  • The link you provided is broken. – lindhe Dec 16 '18 at 19:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.