The SPF policy lets a very large address block pass.

SPF_FLATTEN_BROAD · Severity: Warning

• WarningSPF_FLATTEN_BROAD

  The SPF policy lets a very large address block pass.

  A merged block wider than /16 for IPv4 or /32 for IPv6 covers more than 65 536 addresses, often a provider network that other customers share, and anyone who sends from it passes SPF for the domain. A reachable +all shows as 0.0.0.0/0 and ::/0.

  Recommendation: Replace the broad mechanism with the provider's include or narrower ranges.

Reported by

• SPF flattening check

Available through the API

• SPF flattening check API

Related findings

• Warning SPF_FLATTEN_INCOMPLETE The SPF policy could not be unfolded into a complete list of addresses.
• Error SPF_INCLUDE_LOOP The SPF chain returns to a domain it already evaluated.
• Error SPF_INCLUDE_NOT_FOUND An included or redirected domain has no SPF record.
• Info SPF_MACRO_NOT_EVALUATED An SPF record contains macros that were not evaluated.
• Error SPF_MULTIPLE_RECORDS More than one SPF record was found for a name in the SPF chain.
• Warning SPF_NEUTRAL_ALL The SPF policy ends with ?all.

All findings