I have my spv record :
v=spf1 mx ip4:1.2.3.4 ip4:2.3.4.5 ip4:3.4.5.6 ip4:4.6.7.8 -all
when I test using http://www.kitterman.com , the result has passed validation test without error

And then I test my spf using Mxtoolbox, here is the result :

Prefix Type Value PrefixDesc Description
+ mx Pass Match if IP is one of the MX hosts for given domain name
+ ip4 1.2.3.4 Pass Match if IP is in the given range
+ ip4 2.3.4.5 Pass Match if IP is in the given range
+ Pass
+ ip4 3.4.5.6 Pass Match if IP is in the given range
+ ip4 4.6.7.8 Pass Match if IP is in the given range
- all Fail Always matches. It goes at the end of your record.

when I look into mx & ip4 the setting is pass , but in -all fail .
I am confuse , what is wrong with these , cause these is a part of spf standard.

Fike,

Thanks for using our tools! The 'fail' that you are seeing is actually a part of the SPF record, not that your SPF record is failing with our tool. There are actually four prefixes for SPF records:

"+" Pass
"-" Hard Fail
"~" Soft Fail
"?" Neutral

If a mechanism results in a hit, its qualifier value is used. The default qualifier is "+", i.e. "Pass". If no mechanism or modifier matches, the default result is "Neutral". Mechanisms are evaluated in order. If a domain has no SPF record at all, the result is "None". If a domain has a temporary error during DNS processing, the result is "TempError" (called "Error" in earlier posts and earlier drafts of SPF). If some kind of syntax or evaluation error occurs (eg. the domain specifies an unrecognized mechanism) the result is "PermError" (formerly "Unknown").

If you are unfamiliar with SPF records we would recommend using the SPF Wizard to build/modify them.

Thanks,
Wendy

_________________
Wendy Young
Tier 2 Support Analyst
wendy@mxtoolbox.com

Follow us on Twitter at @MxToolBox, Facebook and read the MxToolBox Blog.

Dear wendy ,

Thank you for your responding .
I am new using Spf and try to implement it .

according to your explanation , there are still error in my spf record ?
but why when I test using kitterman , it seems pass without error.

I use ip4 mechanism to give permision for sending & receive mail.
I have 4 mail server : each server can receive & sent email directly , these my setting :

v=spf1 mx ip4:1.2.3.4 ip4:2.3.4.5 ip4:3.4.5.6 ip4:4.6.7.8 -all

Please correct me , If i wrong.

thank you