Search Close
Email Security Blog

What does “PermError SPF Permanent Error: Too many DNS lookups” mean?

Danielle Tristao September 9th, 2014 Resources
Fallback Featured Image

This is the start of a new ongoing series for us that gives you the tips and tricks you need for successful DMARC deployment.


There are several safeguards put in place with SPF. One of these is a limitation of DNS lookups to help ensure that you do not have timeout issues. SPF will evaluate only 10 DNS mechanism lookups in an SPF record (mechanisms include: a, mx, ptr, exists, include, redirect) before a PermError is raised. Terms in included/redirected-to records count toward that total, which frequently causes records to error out when included from other records even though by themselves they stay within this limit. If you are seeing this error, you will need to remove some of your current mechanisms/lookups.

Leave a Reply

Your email will not be published. All fields are required.

June 30, 2017 Todd Weltz

Why are my Google Calendar Invites Blocked by DMARC?

January 6, 2016 Agari

Security Infographic: 7 Ways to Protect Customers

December 15, 2015 Agari

Don’t Let Your Customers Be Fooled By Cousin Domains

November 17, 2015 Nikki Tyson

What is Email Spoofing?

November 10, 2015 Agari

Exploring Phishing Statistics

mobile image