SPF record contains a term outside ShipReady's supported grammar
ShipReady found a term in the selected SPF record that did not match its supported SPF mechanism or modifier grammar.
Why it matters
A sending domain benefits from an SPF record whose intended terms are reviewed carefully. A term that does not match the scanner's bounded grammar is a useful signal to inspect the deployed record and its provider guidance.
How ShipReady detects it
What it inspects
After selecting one SPF-formatted TXT record, ShipReady splits its text on whitespace and classifies supported mechanisms, qualifiers, and modifiers using its bounded token parser.
What triggers a finding
The rule triggers when one or more whitespace-separated terms do not match ShipReady's supported SPF mechanism/modifier grammar. Unknown modifiers with an equals sign are treated as modifiers by this parser.
What the evidence shows
A term in the selected SPF record did not match ShipReady's supported SPF mechanism/modifier grammar.
Limits of this check
This is not a complete RFC SPF parser. ShipReady does not evaluate includes, macros, mechanism arguments, DNS behavior, recipient evaluation, or actual mail. It does not send email or test delivery, inbox placement, or spam placement.
How to fix it
Inspect the reported SPF terms
Compare each reported term with the SPF syntax and the sending provider's documented configuration. Correct a typo or unintended term only after confirming its intended source.
Review the complete sending configuration
Confirm that the one selected SPF record represents every intended sending service and that its provider-specific mechanisms are current.
Test real sending paths separately
Use controlled messages from intended senders to inspect real authentication results after changing DNS.
How to verify the change
Requery and review the SPF record
After DNS propagation, query the SPF TXT record and verify that the intended terms match the configuration chosen for the domain.
Expected: The published SPF record contains the intended terms and controlled mail tests show the expected authentication results.