SPF=permerror

Products

• Messaging Gateway

Issue/Introduction

Several messages intended for a specific domain are consistently receiving a "permerror" SPF validation result.

Cause

Upon examining the SPF records of the sending domain, it seems that there are over 10 distinct "terms" utilized, including "Include," "a," "mx," "ptr," "exists" mechanisms, and the "redirect" modifier. These terms tigger DNS lookups, and adhering to RFC 7208 standards, SPF records should not exceed the limit of 10 DNS lookups.

Resolution

To ensure compliance or resolve this issue effectively, it is advisable to either reduce the number of DNS queries in the SPF records or seek guidance from an SPF expert.