...
Use an SPF validation tool (e.g., MXToolbox SPF Check).
Confirm that your updated SPF record includes INKY’s mechanism and does not exceed SPF limits:
A maximum of 10 DNS lookups.
TXT record length under 255 characters.
| Note |
|---|
If your DNS provider doesn’t support special characters, you can use the following
|
...
Best Practices and Notes
Keep Only One SPF Record: Ensure your domain has a single SPF record. If there are multiple, merge them into one.
Test Before Finalizing: If you're uncertain, test changes in a staging or non-critical domain before applying them to production domains.
Monitor Email Deliverability: Regularly review email logs to ensure smooth delivery.
...
FAQ
Q: Why do I need an INKY SPF record?
A: INKY operates behind the traditional MX record as an inline email security tool. It ensures that all email is scanned before delivery to the recipient's mailbox. To achieve this, Office 365 and Google Workspace route messages to the INKY cloud for processing. INKY scans the email, applies any necessary banners, and provides delivery
...
Would you like to include troubleshooting tips or common errors customers might encounter?instructions back to the tenant. Adding the INKY SPF record authenticates these transactions, ensuring their legitimacy.
Q: Does this record count toward the 10 DNS lookup limit in SPF?
A: Yes, the exists mechanism in an SPF record counts toward the 10 DNS lookup limit imposed by the SPF standard. Each exists mechanism query constitutes one lookup.
If adding the INKY SPF record causes an SPF "too many lookups" error, contact INKY Support for assistance in optimizing your SPF configuration.
Q: What does "exists" mean in the record?
A: The exists mechanism in an SPF record checks if a specified domain resolves to a valid DNS record. It uses the syntax exists:<domain> and evaluates to true if the domain resolves. This mechanism helps verify the legitimacy of email senders.
Q: What is the purpose of %{i} in the record?
A: The %{i} macro represents the sending IP address in reverse-dotted notation. For example, if INKY sends from 192.0.0.1, %{i} expands to 1.0.0.192._spf.inkyphishfence.com. During SPF validation, the system queries this domain. If it resolves to any DNS record, the exists mechanism evaluates to true, and the email passes SPF validation. Otherwise, the email fails SPF.