SPF DNS diagnostics
Fix SPF void lookups
An SPF include or redirect can point to a DNS name that returns no SPF data. Diagnose those observed void results separately from the number of SPF mechanisms that can cause DNS lookups.
Your SPF policy refers to a dependency with no usable SPF record:
SPF dependency lookup returned NXDOMAIN or NODATA.
What the check reports
- Void results: current NODATA or NXDOMAIN replies on analyzed SPF dependencies.
- Lookup terms: a separate conservative count of DNS-querying SPF mechanisms.
- Limits: receiver handling can vary, so the result does not claim a universal SPF permerror.
Safe repair workflow
- Identify the exact missing include or redirect target.
- Confirm whether the sending service is still legitimate and active.
- Use the provider's current SPF authorization, or remove only a retired dependency.
- Preserve every other authorized sender in the single SPF record.
Reference: RFC 7208 SPF.