-all hardfail — strict policy
Why it matters: SPF tells receiving servers which hosts may send mail for the domain. Without it, any sender can forge the envelope-from — the primary mechanism behind business-email-compromise (SOC 2 CC6.7).
v=spf1 include:spf-0032f701.pphosted.com include:spf.protection.outlook.com include:prss.org exists:%{i}._spf.mta.salesforce.com include:c9eb27a2d7.berenice.eoidentity.com ip4:64.124.132.59/32 ip4:66.150.167.192/27 ip4:162.242.229.170 ip4:205.153.38.0/24 ip4:205.153.36.170 ip4:40.107.0.0/16 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ip4:139.60.0.0/24 ip4:139.60.1.0/24 ip4:139.60.2.0/24 ip4:139.60.3.0/24 ip4:13.111.0.0/16 ip4:136.147.135.0/24 ip4:136.147.176.0/24 ip4:136.147.182.0/24 ip4:198.245.81.0/24 ip4:199.122.123.0/24 ip4:195.66.99.135 ip4:212.227.89.57 ip4:217.160.226.166 ip4:54.194.192.132 ip4:62.75.247.44 ip4:82.165.193.1 ip4:85.25.144.9 ip4:87.79.30.25 ip4:87.79.30.30 ip4:208.86.168.7 ip4:135.84.68.123 ip4:206.152.14.54 ip4:54.240.43.16 include:_spf.salesforce.com ip4:209.144.103.186 include:spf.mandrillapp.com -all
- v=spf1
- include:spf-0032f701.pphosted.com
- include:spf.protection.outlook.com
- include:prss.org
- exists:%{i}._spf.mta.salesforce.com
- include:c9eb27a2d7.berenice.eoidentity.com
- ip4:64.124.132.59/32
- ip4:66.150.167.192/27
- ip4:162.242.229.170
- ip4:205.153.38.0/24
- ip4:205.153.36.170
- ip4:40.107.0.0/16
- ip4:205.201.128.0/20
- ip4:198.2.128.0/18
- ip4:148.105.0.0/16
- ip4:139.60.0.0/24
- ip4:139.60.1.0/24
- ip4:139.60.2.0/24
- ip4:139.60.3.0/24
- ip4:13.111.0.0/16
- ip4:136.147.135.0/24
- ip4:136.147.176.0/24
- ip4:136.147.182.0/24
- ip4:198.245.81.0/24
- ip4:199.122.123.0/24
- ip4:195.66.99.135
- ip4:212.227.89.57
- ip4:217.160.226.166
- ip4:54.194.192.132
- ip4:62.75.247.44
- ip4:82.165.193.1
- ip4:85.25.144.9
- ip4:87.79.30.25
- ip4:87.79.30.30
- ip4:208.86.168.7
- ip4:135.84.68.123
- ip4:206.152.14.54
- ip4:54.240.43.16
- include:_spf.salesforce.com
- ip4:209.144.103.186
- include:spf.mandrillapp.com
- -all