Check your SPF Record

Background

Understanding SPF


SPF (Sender Policy Framework), an email authentication method, is used by email delivery services to prevent email spoofing. The problem is that SPF records flexible as email setups require because limited to a maximum of 10 DNS lookups. You probably did not know but a single service can use multiple DNS lookups and by combining services you may quickly exceed the limit.

...

Every Provider Adds Complexity

For example gmail.com uses 4/10, salesforce.com use 8/10 records, Office 365 2/10, your web hosting provider adds additional records as does your HR software, appointment reminders or any other small tools that send emails on your behalf. If you or your marketing team rely on third-party service providers to deliver their email can quickly exceed this limit.

...

SPF Errors

The biggest problem with going over your SPF limit


You'll never know you did it. The way SPF works, once you exceed your DNS lookup limit, things start to break. The domain authentication or validation may break, or people may be able to spoof your domain for phishing. This means every email that needs a DNS lookup after that won't get the complete result. And since SPF comes with no error handling, you'll just have a bunch of emails that don't get delivered without any obvious warning, unless you know to look for it.

...

Flattened SPF with Monitoring

One solution to the SPF lookup limit is "SPF flattening." Flattening is simply replacing all the domains in the SPF record with their IP addresses, which eliminates the need for DNS lookups. The problem with this "manual" flattening is that email service providers may change or add to their IP addresses without telling you. Then your SPF record is inaccurate, which leads to the same email delivery problems. To do it right, manually flattening your SPF record requires that you constantly monitor your service providers for these changes. We will provide you with FREE SPF flattening and notifications for your domains.

...

Automatic SPF flattening is a better solution

What if you could update your SPF record automatically? Better yet, what if someone else automatically updated it for you and you never had to worry about it again? With AutoSPF you just add a single include in your SPF record that points to our server and we take care of the rest. AutoSPF always returns a flattened SPF record to public DNS queries. It's built on the real-time information held in the include statement. AutoSPF does all those things you'd expect from an SPF flattening service


Features

With AutoSPF you get

Automatic flattening of all the domains in the include

Deduplication of netblocks of all the domains in the include

Real time SPF includes

Constant rescanning of provider includes

Change Notifications via email or webhook

Easily Authenticate Additional Networks

Authenticate New Networks

Automatic Includes


With AutoSPF you won't need to constantly modify your DNS records in order to update SPF. You can add new networks or authenticate new senders at the click of a button.

Here is a typical record, this has 14 of the 10 permitted lookups.

v=spf1 include:sendgrid.net include:stspg-customer.com include:americas1._spf.secure22.com include:email.freshdesk.com include:servers.mcsv.net ip4:166.78.161.197 ip4:52.208.174.36 ip4:52.88.235.200 ip4:54.70.81.194 ip4:168.245.39.190 ~all

After we handle the automatic SPF management your records will look like this,

v=spf1 include:_s00000037.spfdemo.com ~all

and it will use only 4 DNS lookups

...

...


SPF flattening shouldn't cost $100s of dollars per month

When it comes to SPF flattening services, there's no reason to pay $500 per month or even $100 per month. AutoSPF is designed for growing companies who want to solve this problem quickly AND inexpensively.


Free lifetime account

Affordable Pricing


Adding SPF flattening with AutoSPF is fast, easy and affordable No sales calls. No contracts. Up and running in ten minutes. Works with all 3rd party email service providers.