Glossary
SPF Neutral (?all)
SPF neutral (?all) means the domain owner makes no assertion about whether the sending IP is authorised. A ?all result should be treated the same as no SPF record by receivers — neither a pass nor a fail. Using ?all provides no spoofing protection and is generally avoided in favour of ~all (softfail) or -all (hardfail).
When ?all Appears
?all sometimes appears in SPF records during migration or testing. It signals the domain owner is not ready to make an assertion about their sending infrastructure.
What to Use Instead
~all for monitoring phase. -all once all senders are confirmed. Never +all (passes everything).
FAQ
What does ?all mean in SPF?
Neutral — the domain owner makes no assertion. Receivers treat it the same as no SPF record. Provides no spoofing protection.
Should I use ?all in my SPF record?
No — use ~all while setting up, then -all once all senders are confirmed. ?all provides nothing that ~all doesn't.
Is ?all the same as having no SPF?
Effectively yes for most receivers. Neither provides protection. Move to ~all or -all.