SPF Record Generator
Pick your senders and generate a valid SPF record with its lookup cost.
IP mekanizmaları DNS sorgusu harcamaz — mümkün olduğunca include yerine bunları kullanın.
Yeni kurulumda ~all ile başlayıp raporlar temizlendikten sonra -all'a geçmek en güvenli yoldur.
- Kayıt adı (host)
example.com- Kayıt türü
- TXT
- TTL
- 3600 (önerilen)
v=spf1 include:_spf.google.com -allBu kayıt doğrudan 1 DNS sorgusu kullanıyor (limit 10). Her include kendi içinde ek sorgu açar; gerçek toplamı yayına aldıktan sonra SPF analizi aracıyla ölçün.
What is SPF Record Generator?
The SPF Record Generator builds a valid record from the systems that send mail as your domain. Common providers' include values are preloaded, and you can add your own IP ranges and extra includes.
It also counts the DNS lookups the record spends directly. IP mechanisms (ip4:/ip6:) cost nothing, so replacing includes with literal ranges wherever possible keeps you well clear of the 10-lookup limit.
For a new setup, start with ~all and move to -all once DMARC reports confirm every legitimate sender appears. After publishing, measure the real total with the SPF Check tool.
Frequently Asked Questions
8 questionsWhere do I add the generated record?
Create a TXT record at your DNS provider on the domain apex (the host field is usually @ or left blank) and paste the value. Subdomains need their own SPF record — it isn't inherited.
Why is the lookup count labelled "direct"?
This tool can only count the terms you wrote. Each include may contain further includes, so the real total can be much higher. Measure it with the SPF Check tool after publishing, where the whole chain is expanded.
How do I know which includes I need?
List every system that sends mail as your domain: your mail provider, marketing tool, CRM, helpdesk, application servers. A forgotten system means that system's mail fails SPF.
Can I use this to replace my existing record?
Inspect the current record with the SPF Check tool first and carry every mechanism across. A missing mechanism means that sender's mail suddenly stops authenticating. Watch your DMARC reports for at least a week after the change.
How long should I wait after publishing?
A brand-new TXT record usually propagates within minutes because there's no cached previous value. If you're changing an existing record, wait out its TTL.
Can I reuse one record across several domains?
If the senders are the same, yes — publish the same mechanism list on each domain. To centralise, create your own include record (say _spf.yourcompany.com) and include it from the others, but note that costs one lookup per domain.
Is there a safe way to test the record?
Publish it with ~all. Softfail stops a sender you accidentally left out from being rejected — it's only marked. If no unexpected senders appear in DMARC reports for a week, switch to -all.
My provider isn't listed — what now?
Search the provider's documentation for "SPF" or "include"; they all document the value to publish. Put what you find in the "Additional includes" field, one per line if there are several.