redirect modifier
The SPF modifier redirect=domain, which hands the whole check to another domain's record when nothing in the current record matched.
What it means
redirect is for one organization that wants several domains to share one SPF policy. If no mechanism in the record matches, the receiver evaluates the named domain's record instead and returns its result as the final answer, including that record's ending.
That differs from include. include asks a question of another record and keeps going; redirect replaces the policy outright. RFC 7208 adds two rules: redirect is ignored if the record contains an all mechanism anywhere, and if the target has no SPF record the result is permerror. It should appear at the end of the record.
redirect counts as one DNS lookup toward the limit of ten. Use it only between domains you control, since the target's owner then decides your SPF result.
Example
example.org. TXT "v=spf1 redirect=_spf.example.com"Related terms
On this site
Sources
What this definition rests on. The wording is ours; the facts are theirs.
- RFC 7208: Sender Policy Framework (SPF), section 6.1rfc-editor.org
All 432 terms in the glossaryThe wiki: blocklists and bounce codes