Our business email is hosted on Google apps. In addition, our web server may also send email. Currently our SPF record in DNS looks like this:
domain.com. IN TXT "v=spf1 a include:_spf.google.com -all"
This is all fine, however now we’ve outsourced our email list management to another company and we need to include a second domain with include. So, I’m looking for something like:
domain.com. IN TXT "v=spf1 a include:_spf.google.com include:otherdomain.com -all"
If the included data returned PASS, then the include itself generates a result (for example, include:foo.bar generates a PASS, but -include:foo.bar generates a FAIL).
If the included data returned FAIL or NEUTRAL, then the include does not contribute to the result at all, and processing goes to your next mechanism.