SPF monitoring

SPF (Sender Policy Framework) plays an important role in electronic mail and is one of the cornerstone on which DMARC is based.

It is therefore important to monitor SPF and the SPF record to prevent it from causing issues to email delivery.

DMARCwise helps you monitor SPF by continuously scanning and analyzing your domain’s SPF records.

Our SPF analyzer supports all the SPF features and syntax variants and is heavily tested with hundreds of automated tests.

SPF record overview

To see the SPF record discovered by DMARCwise, head over to the dashboard, choose a domain and select the SPF tab.

The SPF record is parsed by our systems and presented visually. Most of the times, you’ll only see the directives table, but there can be two tables:

• Directives are the rules by which SPF determines whether a source IP is authorized.
  • They’re composed of a mechanism (like include, all, and ip4) and a qualifier (+ for pass, ~ for softfail, - for fail, ? for neutral).
  • The directives table presents you each directive with simple natural language, making it easier to understand what your SPF record does. (Importantly, no information present in the record is omitted in this representation.)
• Modifiers are additional rules that alter the SPF record handling. The most common modifier is redirect, which is evaluated only if no mechanism matches and instructs the SPF verifier to instead use the SPF record of the specified domain. An example is shown in the following image.

At any time, you can see the raw SPF DNS record string at the bottom.

Checks and validation issues

Checks and Validation issues are two features that help you discover issues with your SPF configuration and DNS record.

They evaluate the adherence of the configuration to standards and best practices, to ensure best compatibility and interoperability.

Learn more about these features in Checks and validation.