The "all
" mechanism (edit)
This mechanism always matches. It usually goes at the end of the SPF record.
Examples:
v=spf1 mx -all
Allow domain's MXes to send mail for the domain, prohibit all others.
v=spf1 -all
The domain sends no mail at all.
v=spf1 +all
The domain owner thinks that SPF is useless and/or doesn't care.