Minimizing SPF zoho.com

Suggested SPF records: (One query compared with 2 queries originally)

HostnameValue
zoho.com (319 bytes)
 "v=spf1 ip4:136.143.188.0/24 ip4:136.143.184.0/24 ip4:135.84.80.0/24 ip4:135.84.82.0/24 ip4:8.39.54.0/23 ip4:204.141.32.0/23 ip4:136.143.182.0/23 ip4:204.141.42.0/23 ip4:8.40.222.0/23 ip4:65.154.166.0/24 ip4:199.67.84.0/24 ip4:199.67.86.0/24" " ip4:169.148.12 include:zcsend.net -all"
Suggested SPF records in bind zone file format:
zoho.com.	3600	IN	TXT	"v=spf1 ip4:136.143.188.0/24 ip4:136.143.184.0/24 ip4:135.84.80.0/24 ip4:135.84.82.0/24 ip4:8.39.54.0/23 ip4:204.141.32.0/23 ip4:136.143.182.0/23 ip4:204.141.42.0/23 ip4:8.40.222.0/23 ip4:65.154.166.0/24 ip4:199.67.84.0/24 ip4:199.67.86.0/24" " ip4:169.148.12 include:zcsend.net -all"

The DNS queries used to retrieve the original set of SPF records:

QueryResponse
zoho.com TXT
 zoho.com TXTsite24x7-signals-domain-verification=df57290b9f0e5eb1fbcaca5849cc43b5
 zoho.com TXTOSSRH-65508
 zoho.com TXT5d7tzsjx9vpr6dwqfd9910mkffcr1893
 zoho.com TXTqm36k1hcyk8f6rcncfpj7ngl5708cvhl
 zoho.com TXTvgsr5l5dhfv2qr8g5ntl0w9jn9tnqr94
 zoho.com TXT 2nb6vfc9zm9t9f941qhzh8c66z5x6lxp
 zoho.com TXTv=spf1 include:spf.zoho.com include:zcsend.net -all
 zoho.com TXTzoom-domain-verification=e4699571-2e14-4588-bfe0-471a645d4059
 zoho.com TXTgoogle-site-verification=HJDhZb7eVwcBS1ZHYfa3zJKD7Ta5OlTtjGODvld90vs
 zoho.com TXTgoogle-site-verification=SEMszgPBLwGVsVcKzkWqXFsgw8B2IbSPm3X5lVMnoLY
 zoho.com TXTgoogle-site-verification=npo_5EGYt0elo-8NI3LdXc77FK2_lnKC5z4y_dHcxL0
zcsend.net TXT
 zcsend.net TXTgoogle-site-verification=GhAkvr3k88IxODJDwxx0z4TKh10rGqjpIss6Tes5tTA
 zcsend.net TXTv=spf1 ip4:135.84.81.0/24 ip4:135.84.83.0/24 ip4:136.143.160.0/24 ip4:165.173.128.0/24 ip4:135.84.82.0/24 ip4:136.143.161.0/24 ip6:2607:13c0:0001:0000:0000:0000:0000:7000/116 ip6:2607:13c0:0002:0000:0000:0000:0000:1000/116 ~all
spf.zoho.com TXT
 spf.zoho.com TXTv=spf1 ip4:136.143.188.0/24 ip4:136.143.184.0/24 ip4:135.84.80.0/24 ip4:135.84.82.0/24 ip4:8.39.54.0/23 ip4:204.141.32.0/23 ip4:136.143.182.0/23 ip4:204.141.42.0/23 ip4:8.40.222.0/23 ip4:65.154.166.0/24 ip4:199.67.84.0/24 ip4:199.67.86.0/24 ip4:169.148.12 9.0/24 ip4:169.148.131.0/24 ip4:121.244.91.48/32 ip4:199.67.88.0/24 ip4:122.15.156.182/32 ip4:169.148.144.0/25 ip4:199.34.22.36/32 ip4:199.67.80.2/32 ip4:169.148.142.10/32 ip4:136.143.190.0/23 ip4:199.67.82.2/32 ip4:136.143.178.49/32 ip4:169.148.144.10/32 ip4:199.67.80.20/32 -all

About SPF Minimization

This tool reads an existing set of SPF TXT records, then rewrites a subset of them into a new set of TXT records. The new set of records will express exactly the same SPF data as the original set of records.

After being minimized the SPF data will often be expressed in fewer TXT records; this helps you and your customers avoid problems with too many DNS queries leading to invalid SPF.

You shouldn't use this tool blindly to squash your existing SPF records into new ones. In particular you should only select for inlining included SPF records that are under your control. You should leave any included SPF records that are controlled by other people as not inlined (if you don't, then your records won't be updated when the included records are).

If you are minimizing an SPF record that you expect your customers to include, e.g. spf.example.com, then you should start by entering "spf.example.com" into the SPF minimizer, press the Minimize button, then check the "inline" checkboxes for only those included SPF records that list your mailservers. Finally click "Update Inlines" to create a suggested new set of SPF records.

If you are minimizing the SPF record for your own domain, e.g. example.com, then you should start by entering "example.com" into the SPF minimizer, press the Minimize button, then check the "inline" checkboxes for only those included SPF records that list your mailservers, not those that your email providers asked you to include. Finally click "Update Inlines" to create a suggested new set of SPF records.

What else can you do to minimize your SPF records? Avoid using the "mx" entry in your SPF records - it's rarely needed at all, and you can replace it with ip4 and ip6 entries for that server. Also, look at the address ranges you list - if multiple ranges can be replaced with a single larger range that can save some space.

Notice: This is a new tool - you should check that it's suggestions look reasonable before relying on them in production.