analyse_spf
Analyse a domain's SPF record: resolve full include tree, count DNS lookups against RFC 7208, identify authorized senders, and flag misconfigurations like multiple SPF records or +all.
Instructions
Analyse a domain's SPF record: resolve the full include tree, count DNS lookups against the RFC 7208 limit of 10, identify which services are authorised to send mail, and flag misconfigurations such as multiple SPF records or a permissive +all. Use this for SPF PermError, "too many DNS lookups", or to find out which providers can send mail as a domain.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The domain to check, e.g. example.com. Do not include a scheme or path. |