Free tool
The record term by term in plain words, each include expanded into its own record, and the DNS lookups counted the way receivers count them. Most "SPF permerror" problems come from the 10-lookup limit, and here you can see which include costs how many lookups.
What this checks
The receiving server takes the domain of the envelope sender, fetches its SPF TXT record and walks the mechanisms left to right until one matches the connecting address; the qualifier of that mechanism (+ pass, - fail, ~ softfail, ? neutral) is the result. Each include, a, mx, ptr, exists and redirect costs a DNS lookup, including those inside included records, and the standard stops at ten with a permanent error. Only the first record is used; a second one is a permanent error too.
Related tools
Mailboxes in Luxembourg
NovaNode Mail gives you the MX, SPF, DKIM and DMARC records to copy into your DNS, with mailboxes stored in Luxembourg.
