How to create a Sender Policy Framework (SPF) record for hosted email security and spam filtering service

The Sender Policy Framework (SPF) is a community-based effort, which requires senders to publish their mail server in an SPF record.  Whenever an email is received, a check is made to see if the server which sent it is allowed to send emails on behalf of the sender s domain. The purpose of this filter is to detect forged senders. 
For example: you receive a message from '' from machine with IP ''.  SPF works by asking '' if '' is allowed to send email on its behalf.
For SPF to work, the sender's domain ('' in this example) must publish, via DNS TXT records, the hosts which are allowed to send email on its behalf. Thus SPF requires both sender and recipient collaboration. If this information is not published then SPF will return 'unknown', or 'none'.

To create an SPF record:

  1. Complete Microsoft's Sender ID Framework SPF Record Wizard
    1. During Step 3, under Outsourced Domains include and
  2. Publish the SPF record from Step 4 on the authoritative DNS server for your domain
  • Example SPF record, where "ip4: " is the IP address of your mail server:
    • v=spf1 ip4: ~all
More information: