How to specify multiple included domains in SPF record?

Question

Our business email is hosted on Google apps. In addition, our web server may also send email. Currently our SPF record in DNS looks like this:

domain.com.    IN   TXT    "v=spf1 a include:_spf.google.com -all"

This is all fine, however now we've outsourced our email list management to another company and we need to include a second domain with include. So, I'm looking for something like:

domain.com.    IN   TXT    "v=spf1 a include:_spf.google.com include:otherdomain.com -all"

What is the correct syntax for this? Many thanks!

score 105 · Accepted Answer · edited Oct 07 '21 at 07:34

105

All SPF mechanisms, including include, can be used multiple times, separated by spaces:

"v=spf1 include:_spf.google.com include:otherdomain.com -all"

Evaluation of include works this way:

If the included data returned PASS, then the include itself generates a result (for example, include:foo.bar generates a PASS, but -include:foo.bar generates a FAIL).
If the included data returned FAIL or NEUTRAL, then the include does not contribute to the result at all, and processing goes to your next mechanism.

See SPF record syntax and RFC 7208.

(Note that redirect= is not a mechanism but a global modifier, and cannot be repeated this way.)

edited Oct 07 '21 at 07:34

Community

1

answered Feb 16 '12 at 13:54

u1686_grawity

11,332

found a cool simple site that did it for me.. http://spf.zone – l0ft13 Jun 12 '17 at 18:26
1

The original cuestion includes an a after v=spf1 but the answer doesn't. Is that a typo or does a mean something? – Gonzalingui Aug 14 '18 at 12:16
1

@Gonzalingui The a allows you to use your ip address to send mail for that specific domain. – kaiser Mar 21 '19 at 07:40

score 9 · Answer 2 · edited Jul 14 '12 at 11:32

9

This is the correct syntax you requested

domain.com:    IN   TXT    "v=spf1  include:_spf.google.com include:otherdomain.com -all"

edited Jul 14 '12 at 11:32

jscott

24,754

answered Feb 27 '12 at 14:39

achal tomar

433
3
12

score 3 · Answer 3 · answered Jan 27 '20 at 11:21

Just use the include mechanism to add each service in your SPF record:

v=spf1 a include:_spf.google.com include:otherdomain.com -all

Make sure you don't create multiple SPF records on one domain. If you do, SPF will return PermError.

Also note that you don't exceed the 10 DNS lookup limit of SPF, otherwise SPF will return PermError too.

score 1 · Answer 4 · edited Nov 26 '22 at 18:52

1

v=spf1 a include:_spf.google.com include:seconddomain.com include:thirddomain.com -all is the correct way

edited Nov 26 '22 at 18:52

hmallett

2,465

answered Nov 22 '22 at 15:31

Hasan Zaheer

11

How to specify multiple included domains in SPF record?

4 Answers4