SPF record
What it can report
- ✗ high no SPF record (high on a mail domain, low otherwise) How to fix it
- · info more than one v=spf1 record (permerror) How to fix it
- · info unknown mechanism, bad address or modifier (permerror) How to fix it
- · info +all (or an include that ends in +all): anyone may send How to fix it
- · info a huge ip4/ip6 range authorised with + How to fix it
- · info ?all: no policy How to fix it
- ! low ~all (info on a mail domain; low on a non-mail domain) How to fix it
- · info no "all" and no redirect: default is neutral (never when a redirect could not be followed: lookup failure, macro, walk limit, loop, or a target without one SPF record) How to fix it
- · info more than 10 DNS lookups (permerror) How to fix it
- · info 9 or 10 lookups (info) How to fix it
- · info more than 2 lookups returned nothing How to fix it
- · info an include or redirect target has no SPF record (permerror) How to fix it
- · info an include or redirect loops back How to fix it
- · info an included domain publishes several SPF records How to fix it
- · info ptr is deprecated (RFC 7208 5.5) How to fix it
- · info a macro in a domain-spec was not expanded (info) How to fix it
- · info a DNS query inside the tree failed; count is a minimum (info). Only reported next to a proven serious problem; otherwise a failed query makes the check "could not check". How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 4 within Email. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.