Does this SPF record still work?

Read a domain's SPF record and say what is wrong with it: the ten-lookup limit, +all, terms after all, more than one record. Or build one.

Step 1

Enter the domain your mail comes from.

Step 2

We read its published SPF record.

Step 3

You get the DNS-lookup count and everything that would stop it working.

The domain that sends the mail.

What to do

The ten-lookup limit

SPF allows ten DNS-lookup mechanisms — include, a, mx, ptr, exists, redirect. Past ten, receivers stop evaluating and return permerror, and the record stops working entirely.

The trap is that each include also spends the lookups inside it. A provider adding one mechanism to their own record can push you over the limit without you changing anything, and nothing will tell you.