Sender Policy Framework

About SPF Records

Sender Policy Framework/ SPF Records is a type of DNS record published in the domain's DNS that identifies the email servers that are permitted to send emails using the particular domain name. The main purpose of SPF records is to help the recipient email server identify the spam emails, sent using your domain name by spoofing/ forging the From email addresses.

The purpose of an SPF record is to detect Email Backscatter thereby preventing spammers from sending messages with forged From addresses on your domain. The SPF protocol is one of the standard validations to fight against spam and also enable secure email communication. Additionally, it is also a part of DMARC specification.

Configure SPF Records for Zoho Mail

When you send an email using you@yourdomain.com from Zoho Mail, the recipient servers refer the SPF records to check if the email sent from Zoho Mail is genuine. Some email servers reject the emails if there is a mismatch or if there are no valid SPF records for your domain. Generally, you can publish the SPF records as TXT records in the DNS Providers (Domain Registrars/ DNS Managers).

The Valid SPF records that need to be published are provided below:

v=spf1 include:zohomail.com -all

In case you are using multiple Zoho services, you can use v=spf1 include:one.zoho.com -all to avoid any SPF lookup failure.

The usage of -all indicates that no other email server other than zohomail.com will be used to send emails using the specified domain. You can also publish the SPF record that uses ~all instead of -all. This represents soft-fail in case the domain uses other email servers to send emails using the same domain name. 

There should be only a single SPF record for the domain. In this spf record, the zohomail.com is a hostname, which includes a huge set of IP Addresses that our service uses to send emails. In case you use any other third party service or internal email servers to send emails, refer here.

Steps to add SPF TXT record in domain managers:

1. Login to your DNS Manager where your domain's name server is pointed.
2. Select the My Account menu and choose Domains.
3. Expand Domains and click the Manage DNS button for the domain you want to verify.
4. The DNS Manager page will open with information about existing DNS records. 
5. Scroll down to the Records section and click the Add button to add a DNS record
6. Select TXT from the Type drop-down menu.
7. In the Host field, specify @. 
8. In the TXT Value field, enter v=spf1 include:zohomail.com ~all.
9. Click Save.

In case you are using only Zoho Mail to send emails, remove all the other SPF record types from the DNS. Click 'Save Changes' again to save all the changes. Having multiple SPF records will interrupt the SPF check and hence the SPF validation may fail and the emails will end up as Spam in the recipient servers. 

SPF Verification 

You can check the SPF records for all the domains you have in the Organization from the Domains section under Email Configuration menu for the respective domain. 

Steps to verify SPF Status for Domains: 

1. Log in to Zoho Mail account as Administrator or Super Administrator. 
2. In the Admin Console, select the Domains section from the left pane. 
3. All the domains in the organization will be listed. 
4. Select the domain for which you'd like to verify the SPF record.
5. Go to Email Configuration, select SPF from the dropdown, and click Verify SPF Record.
6. Click Verify across each domain to validate the SPF records for the domain. 

 Using additional entries instead of multiple SPF Records 

Multiple SPF records are invalid according to the Sender Policy Framework. Every domain should have a single SPF record, including all the servers that the domain uses to send emails. 

When you add multiple TXT records of type SPF, it causes an interruption in the email delivery and your emails may end up being classified as Spam. As per the RFC Specifications for SPF records, a domain should not have multiple SPF records and this will cause the validation to select more than one record. 

In case you need to use multiple email servers for your domain, you can update the details in the same SPF record instead of multiple entries. 

Other IP Address and Zoho Mail

If you send emails from your multiple services with IP4 address, IP6 Address and a host name the Syntax of SPF record is as explained below.  

Example: If you send emails from your webhost, whose IP4 address is 192.168.20.25, from another automated server with IP6 range ip6:1080::8:800:68.0.3.1/96 and Zoho, the SPF record should be added like below: 

v=spf1 ip4:192.168.20.25 ip6:1080::8:800:68.0.3.1/96 include:zohomail.com ~all

Other Host Names and Zoho Mail

Having multiple records with multiple records v=spf1 include:abc.com v=spf1 include:def.com is invalid as per the RFC specifications. In that case you need to add the SPF record in the format below:

 v=spf1 include:abc.com include:def.com include:zohomail.com ~all.