SPF (Sender Policy Framework) is a TXT record that lists which servers are authorized to send mail for a domain. Receiving mail systems check the SPF record during delivery and may reject or quarantine mail from unlisted senders.

SPF Record Check for infra.gov.sa

SPF record looks good

Raw record

v=spf1 ip4:207.127.100.122/32 ip4:81.208.164.77/32 ip4:130.214.222.200/32 ip4:130.214.222.201/32 include:_spf-dc23.sapsf.com include:_spf-dc82.sapsf.com  -all

DNS lookups: 2 of 10

The record above is parsed for the policy mechanism (~all soft-fail vs -all hard-fail vs ?all neutral) and the list of allowed senders. SPF has a 10-DNS-lookup hard limit per RFC 7208 — the count above shows where this domain stands.

A missing or syntactically invalid record means receivers fall back to local heuristics — often unfavorable. Hard-fail (-all) gives the strongest guarantee but breaks legitimate forwarding; soft-fail (~all) is the common production compromise. If lookups approach the 10 limit, consolidate include: chains.