We’ve had our SPF record set up and have been using dmarcian for about a year and it’s been working fine with no problems and no changes.
Starting 2 days ago, we started getting alerts from dmarcian that our SPF record is invalid because 11 DNS lookups required to evaluate the SPF record. The maximum is 10.
And then, also starting 2 days ago, we started getting these warning message:
Again, we’ve made no changes to anything recently.
Further research shows more details for the warning: “We recommend you remove the mx mechanism from your SPF record. It is against best practice to have an mx tag in the SPF when using round-robin DNS as it’s likely unnecessary and it also adds an additional DNS look-up.”
This is our SPF record:
v=spf1 mx a ip4:126.96.36.199 ip4:188.8.131.52 ip4:184.108.40.206 include:_spf.google.com include:servers.mcsv.net include:_spf.smtp.com include:sendgrid.net include:amazonses.com ~all
So it seems like I can/should just remove the “mx” text? But I don’t remember why we added it in the first place and whether it will break anything if we remove it. Is that really the best solution?