SPF has no all mechanism
Check id: spf.all_missing · fix effort: low
What it means
Your SPF record lists allowed senders but never says what to do about everyone else. Unknown senders pass by default.
The technical detail
No terminal all mechanism and no redirect=. Evaluation defaults to neutral for unmatched sources.
How to fix it
- Append
~all(or-allonce confident) to the record.
Does your domain have this problem?
Run a free scan, takes about ten seconds.