Email Fix Pack

SPF permerror: an include points to a domain with no SPF record

What it means

When SPF evaluation reaches an include:, it checks the target domain's own SPF record. If the target publishes no SPF record at all, the result is a permanent error (permerror), and receivers may treat SPF as failed for the messages that reach that include.

Common causes

• A typo in the include name, for example a missing character in a vendor domain.
• A vendor that changed or retired the domain.
• An include copied from an old guide for a service you no longer use.

How to find it

1. Look up your TXT record: dig +short TXT yourdomain.com.
2. For each include: target run dig +short TXT target-domain. Each one should return a record that starts with v=spf1.
3. Or paste your domain into the SPF counter, which lists includes that publish no SPF record.

Fix

Correct the spelling, replace the include with the vendor's current value from its documentation, or remove it if you no longer use the service. Then re-check.

Check your domain

The free checker reads your live DNS and shows what is missing. The $29 Email Fix Pack writes the fix for your email provider and DNS host, with a rollback plan.

Check your domain free

Sources

• RFC 7208 section 5.2: include

More email delivery fixes