Share via

SPF Duplicate netblocks

Anonymous
2024-03-11T12:15:48+00:00

Hi,

I have recently been tidying up our SPF record, and DMARCIAN is reporting that there are duplicate netblocks in the record. We have the following: v=spf1 mx include:spf.protection.outlook.com include:mail.zendesk.com include:aspmx.pardot.com include:mail.windowsazure.com -all

It appears that include:spf.protection.outlook.com is already contained in include:mail.windowsazure.com.

Is it safe to remove include:spf.protection.outlook.com even though the documentation recommends keeping include:spf.protection.outlook.com?

Thanks

Microsoft 365 and Office | Install, redeem, activate | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-03-11T17:25:55+00:00

    Dear 

    Good day!

    Thank you for posting to Microsoft Community. We are glad to assist!

    Based on your description regarding " SPF Duplicate netblock". it is generally recommended to keep the include:spf.protection.outlook.com in your SPF record, even if it is already included in another include statement. This is because it ensures that all the necessary IP addresses for Microsoft 365 services are included in your SPF record.

    I therefore believe that this issue should be further investigated by our online technical support team. A support Engineer can further connect with you remotely, for further troubleshooting and involve the backend team where need be. The team might request for your public IP address or collect certain detailed logs information with more technical resources. Please understand that as public forum support, we don’t have higher permissions to check and analyze these logs or check the IP addresses and considering your scenario maybe inconveniencing, to quickly help assist, kindly contact your organization admin or you can create a service request to report this symptom to our online channel. Here is contact support document: Get support - Microsoft 365 admin | Microsoft Learn

    Important Note: If any organization's Office 365 Business / Enterprise subscription is from syndicate or reseller partner and if global admin cannot open service request from their side, they may need to contact reseller support provider so that they can help to global admin for opening service request from their side, after that Office 365 technical support team can involve in service request. Thanks for your precious time and your understanding would be highly appreciated. Have a nice day!

    Best regards,

    Inema |Community Moderator

    Was this answer helpful?

    0 comments