What to do
- Add your server or service to SPF (include: or ip4:).
- Keep SPF under 10 DNS lookups.
How it appears in a bounce
550 5.7.23 SPF validation failed
Paste the full bounce into the decoder — it finds every code and recipient and says what to check.