## Notas
Related to [[DMARC]], it's a protocol for email security that protects email senders and recipients against spam, spoofing, and phishing attacks.
It does so by allowing a *receiving mail server* to verify the sender.
An SPF record is a TXT record published in the Domain Name System (DNS). This DNS TXT record contains a list of all the IP addresses that are authorized to send emails from a given domain. In the case of your company, that would mean all of the IP addresses of your company’s servers and domains.
For instance, if you have multiple sending IP addresses, you can indicate all of them on your SPF record. This lets your recipients’ email services know those IP addresses are allowed to send mail on behalf of your domain. On the contrary, it also tells email servers that mail coming from an IP not listed on your SPF record isn’t really coming from your company and should be rejected.
## Referencias
- [[Tech MOC]]
- [Sender Policy Framework - Validity](https://www.validity.com/email-authentication/sender-policy-framework/)
- [Set up SPF Record](https://www.validity.com/blog/how-to-build-your-spf-record-in-5-simple-steps/)
- [[CDR.fyi SPF]]