Search Close
Email Security Blog

DMARC Deployment Tips & Tricks: PermError SPF

Danielle Tristao September 9th, 2014 DMARC
Fallback Featured Image

This is the start of a new ongoing series for us that gives you the tips and tricks you need for successful DMARC deployment.

What does “PermError SPF Permanent Error: Too many DNS lookups” mean?

There are several safeguards put in place with SPF. One of these is a limitation of DNS lookups to help ensure that you do not have timeout issues. SPF will evaluate only 10 DNS mechanism lookups in an SPF record (mechanisms include: a, mx, ptr, exists, include, redirect) before a PermError is raised. Terms in included/redirected-to records count toward that total, which frequently causes records to error out when included from other records even though by themselves they stay within this limit. If you are seeing this error, you will need to remove some of your current mechanisms/lookups.

 

Leave a Reply

Your email will not be published. All fields are required.

October 16, 2018 Fareed Bukhari

One Year Later: Federal Mandate for Email Authentication Huge Success

October 16, 2018 Patrick Peterson

DMARC: A 12-Month Triumph for DHS—and the Nation

August 10, 2018 Patrick Peterson

Half of Federal Agencies Racing to Meet DMARC Active Enforcement Deadline

July 17, 2018 AJ Shipley

5 Big Myths about DMARC, Debunked

July 2, 2018 Armen Najarian

Brand Impersonation Scams Skyrocketing—is DMARC Email Security the Answer?

mobile image