SPF PermError for cisco.com

[Steflstefan]

Hello Cisco,

since some day we get this error:
07 Jun 2021 10:56:04 (GMT +02:00) Message 47730774 SPF: mailfrom identity >username<@cisco.com PermError
Digging SPF Record cisco.com shows:

cisco.com.		1799 IN	TXT "v=spf1 include:mail.zendesk.com ?all"
cisco.com.		1799 IN	TXT "v=spf1 redirect=spfa._spf.cisco.com"

I think you've published two SPF records. SPF RfC says SPF records must be unique.
Maybe you should fix this

Regards Stefan

[SriramV]

updated Cisco IT about this issue 

[SriramV]

issue is fixed now

[mukesh.kumar1@global.ntt]

We are also facing SPF permerror issue in one of our ESA device. Other devices are working as expected. 

Due to this, emails are getting quarantined in DMARC. 

please help to suggest. 

[Ken Stieers]

I have this issue for some companies using DNS flattening services. Our DCs/DNS servers are still 2012, and I think there is a DNS interaction that is a proble. In the ESA we created a custom resole record that tells the ESA to go to Google for the 2 or 3 flattening services that we have an issue with.