report

Every day, send an email to the email-address provided.

The domain part of the email-address is constrained; one of the following must hold:

1. the domain part of the email-address MUST match the current-domain either completely or as a suffix.

2. the current-domain MUST match the domain part of the email-address either completely or as a suffix.

If the domain part is omitted, the current-domain is substituted. An = sign is still required so that SPF clients can recognize that this is a modifier, not a mechanism.

If the localpart@domain is omitted, it is constructed using postmaster@current-domain.

Sites that publish this directive SHOULD keep their SPF TTLs below 24 hours. If they are deluged with reports, they can turn the directive off within a reasonable amount of time.

The Subject header for the report message SHOULD be "SPF report for current-domain from local-domain".

The recommended format for the report is tab-separated values:

client-IP	sender-address	recipient-address	COUNT

The recipient-address field MAY be omitted, in which case the COUNT represents a total for the client-IP/sender-address pair.

"v=spf1 mx report -all"

The current-domain is example.com.

No more than once every 24 hours, at a time of the SPF client's choosing, a report is sent to postmaster@example.com. The report SHOULD include a breakdown for "fail" events by client IP, sender address, and recipient address, with a count for each line. The report MAY also provide a single count of "allow" responses. The report MAY be truncated after 500KB. If no failure events are recorded, SPF client hosts do not have to send the report.

"v=spf1 mx report=bogus@otherdomain.com -all"

If the current-domain is example.com, the report directive is ignored because otherdomain.com does not end in example.com.

"v=spf1 mx report=staff@noc.example.com -all"

If the current-domain is example.com, the report directive is respected because noc.example.com ends in example.com.

"v=spf1 mx report=staff@example.com -all"

If the current-domain is mail.example.com, the report directive is respected because mail.example.com ends in example.com.