diff --git a/applications/email.nix b/applications/email.nix
index ade5e0f..5d9f41a 100644
--- a/applications/email.nix
+++ b/applications/email.nix
@@ -299,7 +299,7 @@ in {
       {
         record = "${cfg.domain}.";
         r_type = "TXT";
-        value = ''"v=spf1 a:${cfg.sub}.${cfg.domain} -all"'';
+        value = ''"v=spf1 include:mail.skynet.ie include:skynet.ie ip4:${cfg.host.ip} -all"'';
       }
 
       # DKIM keys
@@ -324,7 +324,7 @@ in {
         # adkim : alignment policy for DKIM, s => Strict, subdomains arent allowed, r => relaxed, subdomains allowed
         # aspf  : alignment policy for SPF, s => Strict, subdomains arent allowed, r => relaxed, subdomains allowed
         # sp    : DMARC policy for subdomains, none => no action, reports to rua, quarantine => spam, reject => never sent
-        value = ''"v=DMARC1; p=quarantine; rua=mailto:mailman@skynet.ie; pct=100; adkim=s; aspf=s; sp=none"'';
+        value = ''"v=DMARC1; p=quarantine; rua=mailto:mailman@skynet.ie; pct=100; adkim=s; aspf=s; sp=quarantine"'';
       }
 
       # reverse pointer