Replace the include that has several SPF records
Why it matters
An included domain publishes more than one SPF record, which is a permanent error that breaks SPF for your domain as well. You cannot fix their record yourself.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
- Tell the owner of the included domain (usually your mail or marketing provider) that they publish several v=spf1 records and must merge them into one.
- While waiting, remove the include if you no longer use that service, or temporarily replace it with the provider's IP ranges only if the provider documents a stable list; hand-copied ranges go stale, so remove them again once the provider has fixed its record.
- If the include is your own other domain, merge that domain's records into one (see the multiple-records fix).
Related
- Reported by the SPF record check
- Publish an SPF record
- Merge the SPF records into one
- Fix the syntax error in the SPF record
- Replace +all in the SPF record with ~all
- Narrow the very large address range in the SPF record
- Change ?all in the SPF record to ~all
- Choose the right SPF ending for this domain
- End the SPF record with ~all or -all
- Bring the SPF record under 10 DNS lookups
- Leave room under the SPF lookup limit
- Remove SPF terms that point at names that no longer exist
- Fix the SPF include that has no SPF record
- Break the loop in the SPF includes
- Replace the ptr mechanism in the SPF record
- Check the SPF terms that use macros
- Re-run the scan if part of the SPF record could not be read
Scan your domain to see whether this applies to you.