Avatar of J.R. Sitman
J.R. Sitman
Flag for United States of America asked on

How do you combine SPF records in Office 365

How do I combine these?  If you could paste the correct information here, that would be appreciated.

Office SPF
Microsoft 365DNS

Avatar of undefined
Last Comment
J.R. Sitman

8/22/2022 - Mon
Vasil Michev (MVP)

First of all, multiple SPF records for the same domain are not permitted, so you are on the right track by wanting to merge them. Which you can to like this:

v=spf1 include:spf.protection.outlook.com include:yyy.com ip4:11.22.33.44 -all

Open in new window


Do note that there is a limit on the DNS resolutions you can have in the record, and the one used by EOP already has 4 lookups, so excessive "include" clauses will invalidate the SPF. So I would advise you to not add all of these unless you are absolutely sure they are necessary, and there is no option to use other workarounds (such as using a separate domain for sending messages via happifox, etc).

You can use this tool to validate the SPF once you've added all the clauses: https://www.kitterman.com/spf/validate.html
Vasil Michev (MVP)

Oh, and if you are using O365, you dont need the MX clause (which also exhausts the DNS lookups).
J.R. Sitman

ASKER
I need instructions on how to combine them. Then I can test
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
J.R. Sitman

ASKER
Can you send the instructions or do the combine for me please
ASKER CERTIFIED SOLUTION
Saif Shaikh

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
J.R. Sitman

ASKER
Thank you I'll try later this afternoon
Saif Shaikh

Welcome we will await your reply.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
J.R. Sitman

ASKER
I do not see a way to edit this from within Office 365.  Should this be done from Network Solutions?
davorin

-all or ~all should be only one time at the end of the record. It is a DNS record, so you should put it on your domain DNS server.
Are you sure you need to send mails from all these domains mail servers?
J.R. Sitman

ASKER
Worked.  Thanks
Your help has saved me hundreds of hours of internet surfing.
fblack61