SPF record generator

Choose which hosts may send mail for your domain. The TXT value updates live — then publish it at the apex.

1. Domain

Domain (apex)

Optional: load the existing TXT SPF into the fields below.

Redirect to another domain’s SPF

Mechanism: redirect=<domain> — when set, other mechanisms below are ignored.

Authorize A/AAAA of the apex (a) Authorize MX hosts (mx)

Include other SPF records

One domain per line. Mechanism: include:<domain>

Additional A/AAAA hosts

Mechanism: a:<host>

Additional MX domains

Mechanism: mx:<domain>

IPv4 addresses / CIDR

Mechanism: ip4:<addr>

IPv6 addresses / CIDR

Mechanism: ip6:<addr>

Exists macros (advanced)

Mechanism: exists:<macro> (RFC 7208)

How should unmatched senders be treated?

TXT value for the apex hostname:

v=spf1 mx ~all

BIND preview

<domain>. IN TXT "v=spf1 mx ~all"

Check SPF

curl -sS 'https://tools.onesystems.ch/api/tools/mail-generate?kind=spf&mx_mech=true&includes=_spf.google.com&all_qualifier=~'