EasyDMARC Features Guideline
      Back to home
      1. Help Center
      2. EasyDMARC Features Guideline

      EasySPF - EasyDMARC's Dynamic SPF Flattening Solution

      Simplifying SPF Record Management with EasySPF and Overcoming the 10 DNS Lookup Limitation

      Managing SPF records can be complex, especially when dealing with multiple sources and their IP addresses. EasySPF, a feature provided by EasyDMARC, simplifies SPF record management, making it easier for organizations to secure their email communications.

      Understanding SPF and Its Limitations

      Before we dive into EasySPF, let's review SPF and its core principles. SPF is a security protocol that uses IP addresses to verify if a specific server is authorized to send emails on behalf of a particular domain. It relies on the "return path" domain or subdomain for authentication, which is crucial for alignment.

      However, SPF has limitations, particularly its 10-DNS-lookup limit. This limit can be quickly exceeded if you have multiple services or platforms sending emails on your behalf. It's important to note that any include tags within your SPF record count as lookups, including everything beneath those tags.

      Overcoming Limitations with EasySPF: Automated SPF Record Management

      EasySPF, also known as a dynamic SPF flattening tool, offers a solution to the challenges of SPF management. Here's how it works:

      • Automated Flattening: EasySPF automatically extracts IP address values from include tags in your SPF record and consolidates them under a single include mechanism tag. This simplifies your SPF record and reduces lookup counts.
      • IP Rotation Monitoring: EasySPF continuously monitors the IP addresses of your sources. If a source rotates its IP addresses, EasySPF updates your SPF record accordingly, ensuring alignment and reducing the risk of email authentication failures.
      • Single-Deployment Solution: Once you deploy EasySPF, it automatically manages your SPF record, eliminating the need for manual updates and DNS record editing.

      Deploying EasySPF

      Deploying EasySPF is simple:

      • Access EasySPF: Log in to your EasyDMARC account and select the domain you want to enable EasySPF for.
      • Save Record: Click on "Save Record" to propagate the necessary DNS changes, ensuring zero downtime during the transition.
      • Edit Your DNS Record: In your DNS Zone, locate the current SPF record and edit it. EasySPF will have automatically identified the values you need. Delete the existing values and replace them with the EasySPF-provided values.
      • Verification: After making the changes, verify your SPF record. It should show as "active."

      For a more comprehensive guide, you can find detailed instructions here.

      Managing EasySPF

      EasySPF not only simplifies SPF record management but also offers control and flexibility:

      • Adding Email Sources: Easily add sources to your SPF record. For each source, you can specify whether it should be active or temporarily inactive.

        • Adding Sources
      Note that EasyDMARC has a comprehensive email source database with over 1200 entries stored in the backend. We offer automated configuration to make it easier for you. For instance, if you specify "Google" and select the pre-labeled Google Workspace, we will automatically add all the necessary "include" statements for Google in your SPF record. This ensures that you have the correct configuration without the need for manual adjustments.

        • Adding IP addresses

      To add an IP address instead, simply enter "IP address" in the Source Name field. Then, choose "IP4" or "IP6" from the SPF part type dropdown menu, and enter the IP address in the "value" field.
      The same process implies for other types, such as mx, a, etc.

      • Editing and Notes: You can edit source names and add notes for reference.
      • View Raw Record: Access the raw SPF record whenever you need to review or make adjustments.

      Alignment and Capability

      EasySPF provides valuable insights into source alignment and capability:

      • Non-Capable: Sources marked as "non-capable" cannot achieve SPF alignment and do not contribute to authentication.
      • Sub-Domain Capability: Some sources may only be capable of alignment on sub-domains. In such cases, you can configure SPF records separately for those sub-domains.
      • Capable: Sources marked as "capable" are typically capable of alignment and can be retained in your SPF record.
      • Unknown: Sources marked as "unknown" are primarily dedicated sources for which EasyDMARC does not have data on their alignment capability.

      For a more comprehensive guide, you can find detailed instructions here.

      In conclusion, EasySPF simplifies the process by automating SPF flattening, monitoring IP rotations, and offering granular control over sources. This ensures that your emails stay authenticated and secure, providing peace of mind for your organization.