Perhaps a stupid question, but does the current afnog.org TXT record in DNS mean something? $ dig +short afnog.org txt "Success" Although its a bug in SPF software, which should ignore TXT records which don't begin with the SPF flag (e.g. "v=spf1"), it gets flagged as invalid.