Error strings that block delivery—and how to clear them.

22 October 2026

These pages match the phrases operators paste into search. Each one maps the symptom to published DNS, then to what Sender Identity’s static audit and Hosted DMARC stages can and cannot prove. The Guides hub groups the same articles under Troubleshooting & Fixes.

Fixing SPF PermError: too many DNS lookupsMore than ten DNS-causing terms. Flatten, drop dead includes, or split subdomains.
DMARC alignment failed: SPF/DKIM passed but DMARC failedAlignment vs authentication pass.
From p=none to p=reject without dropping legitimate mailReport-driven stages and Hosted DMARC approvals.
DMARC policy is set to p=noneWhy monitoring alone does not stop spoofing.
Gmail 550 5.7.26 authentication missingGoogle’s refusal when SPF/DKIM/DMARC are absent or misaligned.
DKIM signature body hash did not verifyBroken signatures after gateways rewrite the body.
BIMI logo not showing in Gmail or Apple MailSVG Tiny PS, VMC, and pct=100 checklist.
Deploying MTA-STS and TLS-RPTPolicy HTTPS host and TLS reporting DNS.

Also run the free audit so findings use stable IDs such as SPF_LOOKUP_LIMIT and DMARC_POLICY_NONE—each finding card links to the matching guide.