How to check that a domain in Plesk has the correct SPF record?
Using online services
Manually via SSH
Connect to the Linux server or use the SSH Terminal extension (How to connect to a server using SSH/RDP ):
Try to query with a command provided by libspf2 library like as below:
A correctly set domain will print like this (using Google as an example):
# /usr/bin/spfquery_static -ip 220.127.116.11 -sender [email protected] -rcpt-to [email protected]
spfquery: domain of gmail.com designates 18.104.22.168 as permitted sender
Received-SPF: pass (spfquery: domain of gmail.com designates 22.214.171.124 as permitted sender) client-ip=126.96.36.199; [email protected];
A problematic domain looks more like this:
# /usr/bin/spfquery_static -ip 188.8.131.52 -sender [email protected] -rcpt-to [email protected]
Context: Failed to query MAIL-FROM
ErrorCode: (26) DNS lookup failure
Error: Temporary DNS failure for 'example.com'.
Please see http://www.openspf.org/Why?id=from%40example.com&ip=184.108.40.206&receiver=spfquery : Reason: default
spfquery: 220.127.116.11 is neither permitted nor denied by domain of example.com
Received-SPF: neutral (spfquery: 18.104.22.168 is neither permitted nor denied by domain of example.com) client-ip=22.214.171.124; [email protected];
To check that DNS server has information about SPF for domain
example.com, use the
# dig -t TXT +short example.com @126.96.36.199
"v=spf1 +a +mx -all +a:server.hostname.tld"
188.8.131.52IP address of the
server.hostname.tldwhere DNS server is running.
Note: The SPF information can be written in either TXT format or as a dedicated SPF record. The latter is also sometimes referred to as a "type99" record. The SPF information needs to be in at least one of these formats. If both are used, these records must be exact copies of each other. These records are served by the same DNS server that serves
example.com domain name.
libspf2 performs an SPF check in the following order: - First, it queries the DNS server for an SPF record. - If it is not defined, it tries to query for TXT. - If both attempts fail, it means there is no SPF for this domain.
For more information check Plesk Documentation and Help Portal - SPF and SRS
If there is no SPF DNS record found after the test, configure it in accordance with the guide below: