Glossary
SPF PermError — Cause and Fix
SPF PermError (Permanent Error) is returned when an SPF record cannot be evaluated — most commonly because it exceeds the 10 DNS lookup limit or contains a syntax error. Unlike SoftFail or Fail, PermError means the SPF record is technically invalid. Many receiving servers treat PermError the same as a hard fail and reject or spam-folder the email.
Common Causes
- Too many include: statements (over 10 lookups)
- Multiple SPF records on the same domain
- Syntax error in the SPF record
- Circular include: references
How to Diagnose
Run DNS Preflight — the SPF recursive tree shows your lookup count and flags PermError causes immediately.
Expand the SPF tree on domainpreflight.dev
Open DNS Preflight →FAQ
What is SPF PermError?
A permanent error meaning your SPF record is invalid — usually too many DNS lookups or a syntax error. Receivers may reject email when they see PermError.
How do I fix SPF PermError?
Most commonly by reducing DNS lookups below 10 — either remove some include: statements or flatten them to IP addresses.
Does SPF PermError affect DMARC?
Yes. SPF PermError means SPF alignment fails. DMARC can still pass if DKIM alignment passes independently.