𝗧𝗵𝗶𝘀 𝗜𝘀 𝗔 𝗛𝗲𝗮𝗱𝗹𝗶𝗻𝗲

𝗧𝗵𝗶𝘀 𝗜𝘀 𝗔 𝗛𝗲𝗮𝗱𝗹𝗶𝗻𝗲 You have two SPF records on one domain. This causes a PermError.

• You add a new email service like Mailchimp or SendGrid.
• You follow their setup guide without checking if an SPF record already exists.
• Now you have two TXT records starting with v=spf1 at your domain root.
• SPF is completely broken.

RFC 7208 says a domain must not publish more than one SPF record. When a receiving server queries your domain and gets two records back, it returns a PermError. This is not a soft failure. It means SPF evaluation cannot be completed. The result is treated as a hard failure by most providers.

To fix this:

• Take every include, ip4, and ip6 mechanism from both records.
• Combine them into a single record.
• Edit the first record with the merged value.
• Delete the second record entirely.

Example: Before: v=spf1 include:_spf.google.com ~all v=spf1 include:sendgrid.net ~all After: v=spf1 include:_spf.google.com include:sendgrid.net ~all

Check your domain with dig TXT yourdomain.com | grep spf. You should see exactly one result. Source: https://dev.to/inboxgreen/two-spf-records-on-one-domain-causes-a-permerror-how-to-merge-them-5gn8