![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 82%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
Exchange Online
A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 20%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
Dear admin@dsalegal,
To validate outbound mail sent from your domain, you can configure or customize your Sender Policy Framework (SPF) record by listing all authorized mail sources for your domain. For organizations using Microsoft 365, the basic SPF record is:
v=spf1 include:spf.protection.outlook.com -all
If you send email through additional services (such as marketing platforms, ticketing systems, or third-party mail gateways), their SPF entries should be added to the same SPF record before the final -all.
v=spf1 include:spf.protection.outlook.com include:thirdpartydomain.com -all
Please note:
- Only one SPF record should exist for a domain.
- All legitimate sending sources must be included in that record.
- SPF records are subject to a maximum of 10 DNS lookups.
You can find Microsoft's official guidance here: Set up SPF to identify valid email sources for your custom cloud domains
I hope information above meet your expectations, feel free to reach out if you have any other questions.