
SPF's 10-Lookup Limit: Includes, Flattening, and Permerror
Every include, a, mx, and redirect in your SPF record costs a DNS lookup, and the budget is ten. Why records break at scale and how to fix them without flattening regret.
3 articles with this tag

Every include, a, mx, and redirect in your SPF record costs a DNS lookup, and the budget is ten. Why records break at scale and how to fix them without flattening regret.

DMARC fails when SPF or DKIM pass for the wrong domain. The alignment rules, relaxed vs strict modes, and the ESP configuration that fixes it.

Most SPF records are subtly broken. The 10-lookup limit, multiple records, +all, and the alignment trap what's actually wrong with your SPF setup.