Hi everyone,

I'm hoping to get some advice on optimizing my SPF record for a Zoho Mail setup. I use Zoho Mail along with several other Zoho services, and as a result, my current SPF record has grown to include multiple include mechanisms. My Cloudflare record looks like this:

v=spf1 include:zcsend.net include:transmail.net include:zoho.com include:zohomail.com include:one.zoho.com ~all

When I run this SPF record through various online validation tools, I'm consistently flagged for a couple of critical issues:

1. Excessive DNS Lookups: The record results in 11 DNS lookups, which is over the permitted limit of 10. I understand this can cause some receiving mail servers to fail the SPF check outright, potentially leading to delivery problems.
2. Duplicate IP Mechanisms: The validator reports several warnings about duplicate IP addresses, with errors like: "Duplicate ip4 mechanism. The value 'ip4:136.143.188.0/24' is invalid." It seems the IP ranges from the different Zoho include statements overlap.

The recommendation from these tools is to perform SPF Flattening. I understand the basic concept—to consolidate all the IP addresses from the various include statements into a single, flat list of ip4 and ip6 ranges to reduce the lookup count and clean up the duplicates.

However, I want to make sure I implement this correctly for Zoho's ecosystem. My main questions are:

• What is the most reliable way to gather all of the current IP ranges that Zoho uses for email sending, considering all these different services (zcsend.net, transmail.net, etc.)?
• Is there a recommended tool or process for generating an accurate flattened record that won't break my email delivery?
• Once flattened, I'm concerned about maintenance. If Zoho adds new IP addresses in the future, my flattened record will become outdated. What is the best practice for handling these updates? Should I manually re-check and update the record periodically, or are there better solutions?

I would greatly appreciate any detailed steps, personal experiences, or best practices you can share. Thank you in advance for your help