EMAIL / LOCAL RECORD PLANNING

SPF / DMARC generator

Build SPF and DMARC TXT values, check publication syntax and estimate SPF lookup terms from records you provide. Everything runs locally; this tool does not query DNS or authenticate mail.

Record settings

OperationDomain (ASCII / punycode)

Sending IPv4 addresses / CIDRsSending IPv6 addresses / CIDRsInclude domainsUnmatched-sender policyOptional redirect domainWhen set, redirect replaces the terminal all mechanism.

Authorize this domain’s A / AAAA addressesAuthorize its MX hosts

Optional SPF dependency records (one domain=record per line)

Missing records and sender-dependent macros make the recursive estimate incomplete. A count within 10 does not verify DNS availability, void lookups, MX/PTR limits or sender authorization.

Choose a record operation and run the local check.

DNS TXT owner name
SPF lookup planning

TXT value

Zone-style character strings

These strings form one TXT record when joined, with no extra spaces between chunks. Your DNS provider may accept the entire value and split it automatically.

How to publish and interpret a record

Choose Build to describe your actual sending systems and reporting mailboxes, or Validate to check one pasted TXT value. For SPF, provide include and redirect dependencies to extend the term estimate. Publish one SPF record at the sending domain and a DMARC record at its _dmarc owner name. Keep the value as one DNS record even when it needs several character strings.

SPF’s 10-term budget applies to evaluated DNS mechanisms and redirects, including nested records. This estimate conservatively follows non-matching paths; it is not a DNS query count. A risk warning needs review against real senders. IP mechanisms and all add no lookup terms.

DMARC publication checks follow RFC 9989. Missing p can lead to monitoring with a valid rua destination, or no processing without one. Malformed or duplicate tags fail this strict publication check; receiver fallback is not simulated. External reporting authorization and alignment need separate verification. Start with a policy appropriate for your tested mail streams before requesting enforcement.

RFC 7208 — SPF
RFC 9989 — current DMARC
IANA — current DMARC tags