dns.rehab

SPF: who is allowed to send email as your domain?

SPF is a DNS record (TXT at your domain root) listing the mail servers allowed to send email claiming to be from you. Receiving servers check it before accepting the message — but only if the record is valid, reachable, and under the lookup budget.

The trap most tools miss: SPF evaluation may follow at most 10 DNS lookups (include, a, mx, exists, ptr, redirect all count). A chain of vendor includes blows the budget silently, and the record stops working — receivers treat it as an error. Our walk shows you the exact budget as it is spent.

Run it on your domain — the audit includes this check.

Other tools: SPF · DMARC · llms.txt · Header analyzer