spfquery

Check SPF record

$ spfquery -ip [192.168.1.1] -sender [user@example.com]

$ spfquery -ip [ip] -sender [email] -helo [mail.example.com]

$ spfquery -debug -ip [ip] -sender [email]

$ spfquery -version

spfquery [-ip addr] [-sender email] [-helo hostname] [options]

spfquery validates Sender Policy Framework (SPF) records by checking whether a given IP address is authorized to send email on behalf of a domain. It queries the domain's DNS SPF record and evaluates the sending IP against the published policy.
The tool returns standard SPF result codes: pass, fail, softfail, neutral, none, temperror, or permerror. It is useful for mail server administrators to debug SPF configurations, verify that DNS records are correct, and troubleshoot email delivery issues caused by SPF failures.
As part of the libspf2 library, spfquery implements the full SPF specification including mechanism evaluation, macro expansion, and redirect/include processing.

-ip ADDR

Client IP address.

Envelope sender.

HELO hostname.

Debug output.

Show version.

Show help.

DNS required. SPF record must exist. Result interpretation needed.

spfquery is part of libspf2, providing SPF (Sender Policy Framework) validation for email authentication.

dig(1), host(1), postfix(1)