Lets us know if you found this useful. 200. The complete package. exmple. However, companies now utilize third-party senders, and each one takes up 3 or 4 servers. You will find that this SPF record length is much shorter as with PowerSPF we remove all. 1 – Processing Limits states: SPF implementations MUST limit the number of mechanisms and modifiers that do DNS lookups to at most 10 per SPF check, including any lookups caused by the use of the "include" mechanism or the "redirect" modifier. This authorization is done by publishing a record in the DNS (Domain. SPF records usually contain ‘include’ statements that refer to other domains' SPF records. 0: payfast. If a DNS query results in more than one SPF record, there will be no guarantee which one will be used. The SPF spec allows at most 10 DNS lookups. SPF Tools To create/generate an SPF record, there is the SPF record generator, or SPF record creator/builder, which takes these mechanisms and qualifiers: mx , a , ip4 , ip6 , include. Dynamic SPF Flattening is designed to simplify and optimize SPF records in complex email delivery systems. Award winning e-mail security and monitoring software for Microsoft Exchange and IIS. ️ Our platform. Tools. Nowadays, more and more services are necessary to run online operations on a day-to-day basis: marketing, sales, customer. As part of MxToolbox Delivery Center, we automatically detect the sources that are sending email on behalf of your domain. General Usage. Especially with SPF, it is easy to simply add all the ‘include. Enter the details for your new SPF record. Round-trip monitoring of your email sending and receiving latency to prevent issues. DKIM email authentication's goal is to prove the contents of the mail haven't been tampered with. Stars. DMARC. Flattening the SPF record to include less DNS lookups and substituting them for IPs (flattening) is a way to get around the limit. 141The SPF (Sender Policy Framework) redirect is a record modifier that points to a separate domain name containing an SPF record. If you use multiple email service providers, then flattening the SPF record every time is even harder and error-prone. "SPF flattening" is one solution to the SPF search boundary. com include:_spf. If you locate more records, then they need to be merged. If you don't, you probably don't need one yet. These include your own servers, your corporate Inbox Provider, 3rd party. 5. Access your account. For example, if your SPF record initially looked something like this: v=spf1 include:spf. Maintaining Consistency. Host: @. Together, they help prevent spammers, phishers, and other unauthorized parties from sending emails on behalf of a domain * they do not own. Mechanism like ip4 and ip6 are added verbatim, as these don't consume any DNS lookups. Everything is essentially squeezed into an include. DMARC Domain Checker; DMARC Inspector; DMARC Record Wizard; SPF Surveyor; DKIM Inspector; DKIM Validator; XML to Human Converter; DMARC Data Providers;. MxToolbox offers an SPF Flattening tool as part of our Delivery Center Plus plan. Include mechanism in the SPF record specifies another domain or IP address that is authorized to send emails on their behalf. Publish it on your DNS, and you're all set! Try our SPF Record Generator now. These solutions can be varied in implementation, but they typically all present the same benefits. With manual flattening you need to constantly monitor your service providers for these changes, which is troublesome and not recommended. Our tools are designed to easily expose the issues threatening your email delivery. script to expand/flatten SPF records Resources. An SPF flattening tool reduces the instances of errors by compressing all authorized sources into a single, comprehensive, inclusive, yet simplified record that takes care of misconfigurations. A more effective way to avoid SPF errors is to deploy an SPF flattening tool that is automatic and hassle-free – like PowerSPF! This not only ensures that you stay within the 10 DNS lookup limit, it also keeps you updates on any changes made by your email service providers and vendors who often add or. This project implements Sender Policy Framework (SPF) record flattening for CloudFlare managed DNS zones. SPF. SPF record flattening is a technique used to optimize SPF (Sender Policy Framework) records to overcome the 10 DNS lookup limit for SPF. SPF flattening service. Manually flattening your SPF record is both error-prone and tedious, and it's recommended to use a tool to automate this process. The . This ensures that your record is short, crisp, and valid. We are proud to introduce our SPF Flattening Tool 👌. _netblocks. Enter the SPF record that you have already created in the “Value” or “Target” column. flattening-service. Whether you are an email novice, professional, marketer or technician, Delivery Center will help you get your message through. C. ABOUT SPF RECORD CHECK. Contact us via Email, Phone, or TicketSPF ships with a built-in limit to the number of “DNS-querying mechanisms” that a set of SPF records can contain. You can use this tool to split a DNS resource record value into 255 character parts. GNU GPL. com. SPF1 and SPF2 would look like this with all IP's. Sender Policy Framework, or SPF, is an email authentication technique that helps protect senders and recipients from spam, phishing and spoofing. 0 license How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record? I wanted to add these two: include:mailgun. The SPF Surveyor is an SPF diagnostic tool that presents a graphical view of SPF records. During the lookup process, the SPF record is retrieved from the sender’s domain’s DNS. The increasingly widespread use of SaaS email service providers such as Exchange Online, G-Suite, Amazon SES, SendGrid and others is a challenge for email administrators. That’s why we’re launching Universal SPF, an in-line upgrade to traditional SPF. com include:spf. if your SPF lookup exceeds 10, you could look at the number of recursions. SPF/DKIM/DMARC deployment tools Whether you are just getting started, or a seasoned professional, DMARCLY's free deployment tools will aid you in your SPF/DKIM/DMARC deployment. Hello, I am hoping for advice please, on the best way to reduce the number of additional DNS lookups on our SPF record. EasyDMARC’s SPF Record Validator tool allows you to check whether your SPF record is valid or not before publishing it in your DNS to avoid any typos and/or misconfiguration. com -all. Verified Sources should be in your SPF records, meaning they should be Authenticated. com include:spf2. script to expand/flatten SPF records Resources. It is a feature of. za ; 1: include:za. Essentially, these services employ method #2, but do some backend work every few hours to check and update the IP addresses. A more refined and better solution to multiple DNS lookups is Dynamic SPF Flattener. In order to promptly modify your SPF record you can use the following SPF best practices: Try typing down your email sources in decreasing order of importance from left to right in your SPF record. NEAR ZERO CONFIGURATION. ( Here is a list of which providers/solutions provide SPF flattening/macros) Or alternatively, using subdomains for each sender. DMARC and SPF flattening service I am in need of a reputable DMARC email analysis and SPF flattening service (turns dns dmarc records into ip list so its not over 10 dns requests) I need a reputable service as this could affect our outgoing emails. The SPF flattening technique is useful when the DNS lookup limit is approached due to an increased number of SPF mechanisms. Call Our agents are available to assist by telephone +1-855-700-1386; System Status Click to check the system status. Enter the SPF record that you have already created in the “Value” or “Target” column. Use this tab to create an SPF record. Change sources order. zwagerman December 1, 2021, 3:34pm 1. Our tools are designed to easily expose the issues threatening your email delivery. SPF Macros address this concern by effectively concealing authorized sources from cybercriminals. The current DNS-based SPF TXT record is displayed. Rather than SPF flattening being a feature of a larger and more expensive suite of software we have designed AutoSPF to solve just one issue. And you can see down the page that the resolution of their. If there is no match, the email does not pass the SPF test. That’s why we’re launching Universal SPF, an in-line upgrade to traditional SPF. This test will lookup an SPF record for the queried domain name, display the SPF Record (if found), and run a series of diagnostic tests (SPF Validation) against the record, highlighting any errors found with the record that could impact email delivery. e. Optionally, you can specify an IP address to check if it is authorized to send e-mail on behalf of the domain. One of the limitations that SPF introduced is the 10 DNS lookup limit. When the SPF PermError: Too Many DNS Lookups issue strikes, your email deliverability can take a bad hit due to SPF fail. You can fix Permerror by deploying PowerSPF, an SPF Flattenin. com to refer directly to the thirdparty SPF records; thus removing 2 from our count. I noticed today that my SPF record has been distributed so the main record contains includes like _spfcf1, _spfcf2 etc. 100% SPF Focus. An SPF record check is a diagnostic tool that looks up the SPF record for a domain, displays the record and runs tests to uncover any errors within the record that could adversely impact email delivery. SPF record flattening. SPF flattening offers the most effective solution to the problems caused by the SPF lookup limit. Dynamic policy flattening keeps your record up-to. SPF Flattening. v=spf1 ip6:2001:4860:4000::/37 v=spf1 include:_spf. All SPF records must begin with v=SPF1 and end with the ‘all’ tag. Pointing SPF to Valimail will not change the contents of the SPF record on the domain you perform the pointing for, this action just means 2 simple things: 1. SPF1 and. Hi Guys, Would like to know if also other people would be interested in flattening of a SPF record. Blogs. DMARC Check. You may also check each MX record (IP Address. An SPF flattening tool reduces the instances of errors by compressing all authorized sources into a single, comprehensive, inclusive, yet simplified record that takes care of misconfigurations. It addresses the challenge of the “10-DNS-Lookup” limit by dynamically flattening SPF records into a single, consolidated record. We flatten the SPF entries (so you stay under the 10/10 DNS lookups) under one include. One of our favourites, that much is clear! The SPF Record Check tool (aka SPF Checker) allows you to inspect the validity of your DNS record. Skip to main content. One-click instant record flattening with a single include statement. e. To defend against these, once you've set up SPF, you should configure DKIM and DMARC for Office 365. Free DMARC Record. March 7, 2022. The concept of SPF flattening is the opposite direction, e. Use an automated service that flattened the record and then keeps it updated. com ~all . ; The project is opensource ; It will query your list of approved sendors and flatten these into a list of appropriately formatted and sized spf records composed of ip4 and ip6 spf entries. eu. This test will connect to a mail server via SMTP, perform a simple Open Relay Test and verify the server has a reverse DNS (PTR) record. universalspf. This helps you to block fraudulent activity and also reduce. com -all This record allows any host with an IP address specified in. SPF Wizard. v=spf1 +a +mx include: spf. For Record name, specify a name. When you add a new mechanism in your record, you require a new. Domain-based Message Authentication, Reporting & Conformance. Name: The hostname or prefix of the record, without the domain name. The lookup count includes sub-lookups (it's recursive. Get advanced DMARC and Hosted MTA-STS/TLS-RPT services, powered by AI and Threat Intelligence – no contracts no commitments. g. Note that every SPF record also has a 255 character limit, so if you're using only IPs you'll need to break that up into a lot of SPF records probably. Hostname or IP ABOUT DNS PROPAGATION CHECK. Your SPF record is inaccurate. Auto update netblock and scans new/changed IP addresses to keep. Value: v=spf1 include:spf. 2016/11 - new records on output. If you want to learn more about SPF, see our SPF knowledge base article. It causes SPF compression by eliminating various SPF mechanisms and creating a single SPF record, which contains all IP addresses related to multiple domains. Fully scalable from SMB to enterprise with a budget-friendly price. Add a comment. SPF Wizard. All of our paid plans come with access to our highly experienced technical support team. If you want to specify an SPF record manually, use the SPF. A fim de validar e-mails, o SPF especifica ao servidor de. This announcement comes as part of the industry’s shift towards better email authentication practices in the aftermath of several high-profile phishing attacks targeting. Mailhardener helps you to manage these policies, whilst monitoring all email traffic that use your domain name. It means putting the IP addresses in place of all the domains in the SPF record. Automatic/dynamic SPF record flattening. com include:_sampledomain2. There are potentially several reasons for low SPF Pass Rates for Verified Sources: Spoofing – A malicious actor is trying to use your domain to legitimize their spam or malware. Tools. Email headers are present on every email you receive via the Internet and can provide valuable diagnostic information like hop delays, anti-spam results and more. SPF flattening er processen med at konvertere en SPF-record til et format, der indeholder færre end 10 DNS-opslag. Phone: 1 778 265 0114 Mail: info@timberstonetools. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. SPF records only permit 10 ‘lookups’ to lessen the strain on the email receivers’ side and issues with SPF modifications. . About. Type: TXT. Because it doesn’t necessarily mean ‘everything’, but. However, since ISP's change their IP addresses frequently, the flattened IP addresses change accordingly. com's IP addresses directly into your domain's SPF record to "flatten it", however then you need to manually keep up with appriver's changes. somesite. Keeping your SPF record updated with all the sending sources, and SPF flattening help in staying within the void lookup limit of 2. In the SPF/SIDF Verification section, click Yes. SPF Pass Rates for Verified Sources AutoSPF automatically flattens and compresses all domains within the SPF, eliminating the need for additional DNS lookups. Note that if you check the newly published SPF record, it might take up to 1 hour before it appears in whatever tool you use to check it, due to DNS propagation. Mistake 1: Multiple SPF records. SPF flattening exists to clean up the SPF record and bring the DNS lookup under 10. This eliminates the need for DNS lookups. For example:Upgrade for Live Support. Using an SPF fattening tool, on the other hand, allows you to scale. Testing SPF Records. I realize spf flattening is fragile, but it. The SPF flattening works by removing the ‘a,’ ‘mx,’ and ‘include’ mechanisms to make a simplified SPF record and reduces the amount of DNS lookups. ; Provide these entries as a chain of spf include. Select Include and enter the domain or IP address you want to include in the record. The ‘TXT value’ field is where you’ll copy and paste the SPF record you created, as explained above. up to _spfcf12. SPF validator. With Dynamic SPF Flattening, organizations are likely to create a centralized SPF record that includes. SPF Flattening. com wants to implement SPF. It provides a simple, intuitive system to help manage your complex SPF configurations. 2. org is used for testing now. 1. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. spf-tools since version spf-tools/spf-tools@f4f51f7 do not output merely ip4 and ip6 records, but also keep original ptr and exists ones. com ~all. SPF flattening isn’t a one-time deal; hence, you need an automated process; you must change your SPF. You’re using bots to send bulk emails to customers for business or marketing purposes. com) Import DNS SPF record into system. You should see that it passes with an output similar to the example below: Example SPF policy details: IP address: 13. To run an SPF check, enter the domain in question, and it will fetch the SPF record (if any) from the DNS. You could incorporate all of appriver. DKIM and SPF can be compared to a business license or a doctor's medical degree displayed on the wall of an office — they help demonstrate. Under Additional Settings, select Manage DNS. com for our example without impacting the real amazon. com include:transmail. _o. Once done the reporting organization will start sending you reports by mail to your reporting address. SPF record flattening, as the name indicates, is a process to sort of "flatten" the hierarchy in an SPF record so that the flattened record contains fewer than 10 DNS lookups. Readme License. First, sign in to your domain’s management console, choose which domain you’re adding an SPF record to, and go to ‘manage DNS records. SPF flattening is awesome - unfortunately lots of companies are trying to charge huge amounts for managed SPF includes. These include your own servers, your corporate Inbox Provider, 3rd party marketing tools,. outlook. You could do this manually, but then you have to update your SPF records every time one of the providers changes their IPs (which happens frequently). You can click Diagnostics , which will connect to the mail server, verify reverse DNS records, perform a simple Open Relay check and measure response time performance. SPF email records help maintain a list of verified senders for your domain that can be publicly looked up and retrieved by receiving. net ~all . Wait while we convert your file to JPG to flatten your PDF. Which is why we’re wanting to investigate SPF flattening, but not sure how other have dealt with this, or what experience others have with record flattening. EasyDMARC is a comprehensive and easy-to-use tool that ensures organizations can manage their SPF, DKIM, and DMARC setup effectively. SPF Flattening. Use an Automatic SPF Flattening Tool. SPF allows the owner of a domain to set a range of IP addresses and domains that are authorized to send email on behalf of that domain. Each time an email message hits the email service host, the host looks up in the DNS to perform SPF check. You will be transferring management of the SPF from. SPF enables your email server(s) to authenticate whether an incoming message was sent from an authorized mail server – but only when your. outlook. Spoofing is the unauthorized use of email by forging a domain name or address. SPF-tools "Record flattening" feature at dmarcian SPF Surveyor; License. AutoSPF API. Here to help you. Domain name spf-tools. SPF flattening is the process of converting an SPF record into a format that contains fewer than 10 DNS lookups. A sender policy framework (SPF) record is a type of DNS TXT record that lists all the servers authorized to send emails from a particular domain. The tool will perform the SPF lookup to test the SPF record and validate the SPF record on the following checks. As part of MxToolbox Delivery Center, we automatically detect the sources that are sending email on behalf of your domain. MxToolbox offers an SPF Flattening tool as part of our Delivery Center Plus plan. DMARCLY Everything about DMARC, DKIM, SPF, email authentication, deliverability, anti-spoofing, anti-phishing, security, and tools. org. exmple. The SPF Record Check is a diagnostic tool that acts as a Sender Policy Framework (SPF) record lookup and SPF validator. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. Make sure you remove redundant, repeated, and NULL mechanisms within your SPF record which also adds to the character limit. The increasingly widespread use of SaaS email service providers such as Exchange Online, G-Suite, Amazon SES, SendGrid and others is a challenge for email administrators. com and spf2. SPF. SPF specification has a limit on the number of DNS lookups (10) required to fully resolve an SPF record. This includes creating and updating these records. Sender Policy Framework, more commonly known as SPF, is an email authentication standard that allows a domain owner to authorize the use of its domain in email messages, with such authorization tied to the physical source of the message. DMARC or ‘Domain-based Message Authentication, Reporting, and Conformance’ is the umbrella mechanism forming the basis of authentication checks like SPF and DKIM. This tool can help you generate a SPF Record or modify your current SPF Record as well as to check the modified record has. Those mechanisms are: a , mx , ptr , exists , include , and redirect . SPF Flattening service from cloudflare. SPF is designed to help prevent spoofing, but there are spoofing techniques that SPF can't protect against. The ‘-all’ tag specifies a fail (or hardfail. You will need to add the missing senders to your SPF record or use an SPF Flattening tool. You could theoretically extract the flat IP records from the resulting JSON file and automatically update your DNS configuration. Guaranteed best prices of DMARC, SPF, BIMI, MTA-STS, TLS-RPT Services now. Compatible with Every Email Platform & Tool. SPF flattening refers to the replacement of all the domains in your SPF record with their respective IP addresses. TXT records were initially created for the purpose of including important notices. If your record for SPF is exceeding the lookup limit after including all vendors, flatten it with our auto SPF flattening tool. Next, go to the ‘add DNS TXT record’ option. This test will check the propagation of DNS records across your servers for the selected DNS record type. An SPF Flattening service will regularly check the email sources you specify should be part of your SPF records, parse, deduplicate and refactor them to ensure a “flat” SPF record that meets the lookup restrictions on SPF. There are some obvious things we can do to reduce the number of lookups; e. Overview. When using PowerDMARC’s SPF Flattening tool, we’ll generate a valid SPF record for you with all of your hosts and IP addresses included in one single line of text. If you don't, you probably don't need one yet. Choose Next. example. SPF record flattening (automatically) Feedback Feature Request Submitting & Feedback. Upgrade for Live Support. You will need to add the missing senders to your SPF record or use an SPF Flattening tool. Put the most important 10 lookups in the SPF record and rely on DKIM for the rest for DMARC. secureserver. Check for multiple SPF records. You can add as many domains and IPs as you want—just separate. Drag & drop your file into our PDF to JPG tool. MxToolbox offers an SPF Flattening tool as part of our Delivery Center Plus plan. Just like an SPF Record Checker, a DKIM Analyzer tool also tests a domain name and tries to locate it in the published DKIM records. We will explain how automatic/dynamic SPF record flattening can solve this problem below. Email has security standards to control which senders are allowed to send email for your domain. exceed 10 host lookup limit. Flattening. SPF is the cornerstone of your email delivery strategy. Check the SPF record using EasyDMARC's SPF Checker or command-line tool to ensure all the authorized IP addresses and sources are listed. Det kan være nyttigt til fejlfinding og komprimering af SPF-poster. Alternatively, you can flatten records to remove DNS lookups. What we like: Our. example. Simple enter your SPF record, click the Check SPF Record button, then scroll down to the Flattened SPF record section below to find the flattened SPF record. SPF flattening is het proces waarbij een SPF record wordt omgezet in een formaat dat minder dan 10 DNS lookups bevat. Learn below why it is so. Save changes to your record. Are you confident your email is getting through? MxToolbox is YOUR expert on email deliverability. Help on SPF record checker. Het kan nuttig zijn voor het oplossen van problemen en het comprimeren van SPF-records. com -all. Please review your mail server for any type of SPF check scanning. com to refer directly to the thirdparty SPF records; thus removing 2 from our count. The project is opensource; It will query your list of approved sendors and flatten these into a list of appropriately formatted and sized spf records composed of ip4 and ip6 spf entries. SPF Flattening. net ~all. This service was brought to you by ORF, our award-winning email security solution for Microsoft® Exchange and IIS SMTP servers. About ORF. Se envían a las carpetas de spam de los destinatarios. Contact Us | 011-45170050 | Chat ; Get Started. Reducing Risks of Misconfigurations. Philadelphia 76ers Premier League UFC. ” Flattening is simply replacing all the domains in the SPF record with their IP addresses, which eliminates the need for DNS lookups. If you’re getting started with SPF, DKIM and DMARC, this is a great guide to using our free tools and improving your Office 365 configuration for better email delivery. For the most part, our advice for th. On the results page, click "Edit and Organize”. SPF Macros Explained. DMARC Record Check. com) Import DNS SPF record into system. We spend all our energy and resources focused on the best technology solutions for your SPF management. Use our free SPF Record Generator tool to secure your domain. 🔥 Universal SPF 🔥 Remove DNS lookups and fix policy errors in seconds. Choose the “Convert entire pages” option. NOTE: this approach does not take into account administrative or domain boundaries, and is meant to show that "minified" SPF records are possible. Receivers use these policies to determine if a sender is to be trusted. Provide these entries as a chain of spf include entries. More DNS lookups = More problems. Press this button and EasyDMARC will reveal all the information about SPF records on your domain. It works by walking through the SPF tree of your record, translating every tree node into one ore more IP addresses, removing the duplicate IP addresses, then creating a new series of SPF. A DNS TXT (“text”) record lets a domain administrator enter arbitrary text into the Domain Name System (DNS). The SPF record checker, aka SPF record validator/tester, checks if an SPF record is published on a domain, and if the SPF record's syntax is correct. When you add a new mechanism in your record, you require a new DNS lookup. Mar 11, 2023 Knowledge. This tool - spflat - solved many problems and has some excellent features and characteristics. Lookup List Here is a list of DNS lookups contributing to your count. If you have any queries. Het werkt door alle domeinen in het SPF-record te vervangen door hun IP-adressen, waardoor meerdere DNS lookups niet meer nodig zijn. Help on SPF record checker. If you use multiple email service providers, then flattening the SPF record every time is even harder and error-prone. The best fix is to reconfigure sendgrid or mandrill or qualtrics to use a subdomain for all their sending. protection. Look Up DKIM Record. DKIM. As part of MxToolbox Delivery Center, we automatically detect the sources that are sending email on behalf of your domain. org include:sendgrid. 3. About Press Copyright Contact us Creators Advertise Developers Terms Privacy Policy & Safety How YouTube works Test new features NFL Sunday Ticket Press Copyright. The users must include the _spf. Packages 0. I noticed today that my SPF record has been distributed so the main record contains includes like _spfcf1, _spfcf2 etc. mimecast. When using SPF email authentication, each time an email is sent from a domain to the recipient’s domain, the recipient’s email server performs DNS query requests, also known as DNS lookups, to check for existing authorized IP addresses in your DNS and compare them to. If you don't, you probably don't need one yet. The more 3rd-party email sources you add to your domain, such as Marketing Automation, CRMs, Customer Support, and Order Fulfillment, you quickly max. 22. MxDelivery Center analyzes your DMARC, DKIM and SPF to give you the insight you need to make email configuration changes and get your emails to your customer's. v=spf1 a mx ptr include: secureserver. With the SPF lookup you analyze the SPF record of a domain for errors, security risks and authorized IP addresses. In practical terms, this means that if your SPF record includes too many "include" mechanisms, "a. About. Sports. The SPF record contains a reference to external rules, which means that the validity of the SPF record depends on at least one other domain. net include:anotherSite. When 10 SPF lookup limit is exceeded,. SPF record is being read from left to right, so it makes sense to put the most critical or frequently used email. I have named the project Expurgate. Use our free tool to validate your SPF record in seconds. spf. As you add more third-party email sources, such as CRMs, Marketing Automation, Customer Support, Order Fulfillment, and other tools to your domain, you quickly max out of the allotted SPF configuration options. DKIM . Domain-based Message Authentication, Reporting & Conformance gives unprecedented insight into your organization’s email flow. This test will lookup an SPF record for the queried domain name, display the SPF Record (if found), and run a series of diagnostic tests (SPF Validation) against the record, highlighting any errors. Our SPF check tool will evaluate whether you have an existing SPF record published on your DNS. The problem is that email service providers can modify or add to their IP address without telling you about this "manual" flattening. Dynamic SPF allows you to have more than 10 DNS lookups without the worry to hit your lookup limit. 1. Create a new TXT Record.