Authorize senders with SPF

Configure SPF records to work with Google Apps

To create an SPF record for a domain:

  1. Log in to the administrative console for your domain.
  2. Locate the page from which you can update the DNS records.
    You may need to enable advanced settings.
  3. Create a TXT record containing this text: v=spf1 include:_spf.google.com ~all

    Publishing an SPF record that uses -all instead of ~all may result in delivery problems. See Google IP address ranges for details about the addresses for the Google Apps mail servers.

    To authorize an additional mail server, add the server's IP address before just before the ~all argument using the format ip4:address or ip6:address. (See Sender Policy Framework for more details on the SPF format.
  4. If your registrar also requires a host setting (such as @), see the TXT records for specific domain providers list for precise instructions.
  5. Save your changes.
    Keep in mind that changes to DNS records may take up to 48 hours to propagate throughout the Internet.
Note: Multiple SPF records are not recommended and may cause delivery and spam classification issues. See Multiple SPF records for more information.

If you have difficulty creating an SPF record, contact your domain provider for assistance.

Do you manage the Postini product separately from Google Apps? If so, you can learn how to configure SPF records for Postini at the Postini Help Center.