Question 1

Does SPF alone prevent spoofing?

Accepted Answer

No. SPF only authorizes sending IPs. Pair it with DKIM and a DMARC policy when you are ready for fuller protection.

Question 2

Can I use multiple include statements?

Accepted Answer

Yes. Each include - and every nested include it pulls in - counts toward the RFC 7208 limit of 10 DNS lookups.

Question 3

Why is MXToolbox or EasyDMARC showing different results?

Accepted Answer

Usually DNS cache and TTL. Resolvers can serve an older TXT until the TTL expires; wait or query from another resolver after you change SPF.

Free SPF Checker & DNS Record Validator