About SPF Record Builder and Analyzer

Provides a small SPF builder and RFC 7208-aware static analyzer without sending a domain or record to a server. It parses qualifiers, mechanisms, and modifiers; checks IP prefixes and domain-spec arguments; counts explicit DNS-querying terms; and flags policies such as +all, discouraged ptr use, unreachable mechanisms, and ineffective redirect combinations.

• Counts include, a, mx, ptr, exists, and redirect as DNS-querying terms toward the limit of 10.
• Supports all, include, a, mx, ptr, exists, ip4, ip6, redirect, and exp syntax.
• Does not resolve DNS, expand macros, recurse through include or redirect records, or predict actual sender authorization.
• Does not publish, retain, or transmit the record.

Frequently Asked Questions

Why can the real lookup count be higher?

An include or redirect can evaluate another SPF record with its own DNS-querying terms. Static analysis sees only the record pasted here, while receivers enforce the limit across recursive evaluation.

Is a syntactically valid record safe to publish?

Not necessarily. Confirm every authorized sender, test the live DNS response, and stage policy changes carefully; syntax alone cannot establish the intended mail flow.