This guide explains what an SPF record is, how it works, and how to edit it in your domain's DNS zone file on the previous Webland platform (Classic). You will also learn how to authorise additional mail servers to send emails on behalf of your domain.
Who is this guide for?
This guide applies exclusively to customers who manage their domain through the System Configurator on the previous Webland platform (Classic).
You can access it at classic.webland.ch.
Are you already using the new Webland platform (WHMCS)? Then log in via the new Webland website. The following steps do not apply to the new platform.
What is an SPF Record?
SPF (Sender Policy Framework) is an email authentication mechanism used to specify which mail servers are authorised to send emails on behalf of a particular domain.
An SPF record is published as a TXT record in your domain's DNS zone file.
Receiving mail servers can use this record to verify whether the sending server is authorised for the domain used in the SMTP envelope.
SPF helps reduce domain misuse and email spoofing.
Important: SPF alone does not prevent all forms of email spoofing. For more comprehensive protection, it is recommended to use DKIM and DMARC as well.
Standard SPF Record for Webland
If you send emails exclusively through mail servers authorised by Webland, you can use the following SPF record:
v=spf1 include:spf.mail.webland.ch -all
What does this record mean?
v=spf1: Identifies the record as SPF version 1.
include.mail.webland.ch: Includes the mail servers authorised through Webland's specified SPF record.
-all: Indicates that all other servers are not authorised according to the SPF policy.
This defines which mail servers are authorised to send emails for your domain.
Note: SPF is evaluated by the receiving mail infrastructure. Whether an unauthorised message is rejected, flagged, or handled differently depends on the receiving mail server's configuration.
Requirements
To edit your SPF record, the following requirements must be met:
You have access to the previous Webland platform (Classic).
You know your customer number and customer password.
You can edit your domain's DNS zone file.
You know which mail servers or email delivery services should be authorised to send emails for your domain.
Important: Changes must be made in the DNS zone used by your domain's authoritative nameservers.
Step-by-Step Instructions: Edit an SPF Record
1. Log in to the System Configurator
Open the System Configurator.
Log in using your customer number and customer password.
2. Open DNS management
Navigate to your domain's DNS management section.
Open DNS → Edit Zone Files.
Select the DNS zone file for the desired domain.
3. Check the existing SPF record
Look for a TXT record whose value begins with v=spf1.
Check which mail servers are already authorised in the SPF record.
If you need additional sending servers, extend the existing SPF record.
Important: Only one SPF TXT record beginning with v=spf1 is permitted for the same domain name. If an SPF record already exists, extend it instead of creating a second one.
4. Modify the SPF record
Add the required mail servers or email delivery services to the existing SPF record.
Make sure the information is correct and follows the required SPF syntax.
5. Save your changes
Review the complete SPF record.
Save the changes in the System Configurator.
Allow time for the DNS changes to take effect.
Extend an SPF Record for External Mail Servers
If you use additional mail servers or external email delivery services alongside Webland, you may need to authorise them in your SPF record.
This may be necessary when sending newsletters or automated emails through an external service.
Option 1: Authorise an external mail server using an IPv4 address
If you know the static IPv4 address of an external mail server, you can add it using the ip4 mechanism.
Example:
v=spf1 ip4:192.0.2.10 include:spf.mail.webland.ch -all
Replace 192.0.2.10 with the actual public IPv4 address of the external mail server.
Note: The example address is for illustration purposes only and must be replaced with the correct IP address.
Option 2: Authorise an external email service using SPF Include
Many external email providers supply their own SPF record, which can be referenced using the include mechanism.
Example:
v=spf1 include:spf.mail.webland.ch include:spf.example.com -all
Replace spf.example.com with the SPF domain specified by your external email provider.
Important: Only use the SPF configuration explicitly recommended by your external email service provider.
Option 3: Use the MX mechanism
The SPF mx mechanism allows you to authorise the IP addresses of mail servers identified through a domain's MX records.
Example:
v=spf1 mx:externaldomain.ch include:spf.mail.webland.ch -all
This record authorises the mail servers identified through the MX records of externaldomain.ch.
Important: The MX mechanism uses a domain name rather than an individual MX hostname. It is only suitable if those MX servers are actually used for outgoing email delivery.
Important Notes
Only one SPF record: Only one SPF TXT record is permitted for the same domain name.
Correct syntax: Incorrect SPF records may cause email delivery problems.
External mail servers: Use the SPF configuration provided by the relevant email service provider.
DNS updates: Changes may take time to become visible due to DNS caching and TTL values.
SPF lookup limit: SPF evaluation allows a maximum of ten DNS-querying mechanisms or modifiers, including include, a, mx, and exists.
-all: Marks servers not listed in the record as unauthorised. The receiving mail server determines how to handle the message.
DKIM and DMARC: Whenever possible, combine SPF with DKIM and DMARC to improve email authentication.
Frequently Asked Questions and Troubleshooting
Where can I edit my SPF record?
Log in to the System Configurator and open:
DNS → Edit Zone Files
There you can modify the corresponding TXT record for your domain.
Can I create multiple SPF records?
No. Only one SPF TXT record beginning with v=spf1 is permitted for the same domain name.
If you use multiple mail servers or email delivery services, they must be combined into the same SPF record.
Do I need to update my SPF record when using an external newsletter service?
This depends on the sender configuration and authentication methods used by the external service.
If the service requires SPF authorisation for your domain, you must extend the existing record according to the provider's instructions.
Why are my emails being rejected despite having an SPF record?
Possible reasons include:
The sending mail server is not authorised in the SPF record.
The SPF record contains a syntax error.
Multiple SPF records exist for the same domain name.
The permitted number of SPF DNS lookups has been exceeded.
The receiving mail infrastructure performs additional checks such as DKIM or DMARC.
How long does it take for SPF changes to take effect?
This depends on DNS TTL values and DNS caching.
It may take some time before updated SPF records are used by all receiving systems.
Tip
Before modifying your SPF record, identify all mail servers and email delivery services that actually send emails for your domain.
This helps ensure that all required servers are authorised without adding unnecessary entries.
If you are unsure about the configuration, our Webland Support team or your external email service provider will be happy to assist you.
Done! You now know how SPF records work and how to edit or extend them for additional mail servers on the previous Webland platform.