--- title: "What is the ‘554 5.7.5’ permanent error in DMARC and how to fix it? | AutoSPF" description: "The response from the remote server was: DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From." image: "https://autospf.com/og/blog/554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it.png" canonical: "https://autospf.com/blog/554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it/" --- Quick Answer Have you been receiving this error message lately? If so, then your DMARC has an issue, it has encountered a “554 5.7.5 Permanent Error Evaluating DMARC Policy” error when sending emails. This triggers the email delivery process, ultimately causing emails to either land in spam folders or bounce back with the above response. ## Try Our Free DMARC Checker Validate your DMARC policy, check alignment settings, and verify reporting configuration. [ Check DMARC Record → ](/tools/dmarc-checker/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2F554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=What%20is%20the%20%E2%80%98554%205.7.5%E2%80%99%20permanent%20error%20in%20DMARC%20and%20how%20to%20fix%20it%3F&url=https%3A%2F%2Fautospf.com%2Fblog%2F554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2F554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2F554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it%2F&title=What%20is%20the%20%E2%80%98554%205.7.5%E2%80%99%20permanent%20error%20in%20DMARC%20and%20how%20to%20fix%20it%3F "Share on Reddit") [ ](mailto:?subject=What%20is%20the%20%E2%80%98554%205.7.5%E2%80%99%20permanent%20error%20in%20DMARC%20and%20how%20to%20fix%20it%3F&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2F554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it%2F "Share via Email") ![permanent error](https://media.mailhop.org/autospf/images/2024/07/spf-record-office-365-4110.jpg) The response from the remote server was: _DMARC ([RFC 7489](https://datatracker.ietf.org/doc/html/rfc7489)) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible `From` header. According to Google’s February 2024 bulk sender requirements, a DMARC policy of at least `p=none` is now mandatory for any domain sending 5,000+ messages per day to Gmail users._ ``` 550554 5.7.5 Permanent Error Evaluating DMARC policy - https://support.google.com/mail/?p=NoSuchUser 5614622812f47-3c9abcd56a5si510142b6e.2- gsmtp ``` Have you been receiving this error message lately? If so, then your DMARC has an issue, it has encountered a “554 5.7.5 Permanent Error Evaluating DMARC Policy” error when sending emails. This triggers the email delivery process, ultimately causing emails to either land in spam folders or bounce back with the above response. And not to mention, how [failed emails](https://www.marketingweek.com/the-red-flag-signs-its-time-to-rethink-your-marketing-technology/) impact your marketing, PR, customer support, internal communication, and operations in general. For a complete overview, see our [comprehensive DMARC guide](/blog/what-is-dmarc-email-authentication-guide/). While this is one of the common DMARC errors, not much has been discussed about it on the internet. So, we have created a full-fledged guide for you on what this is and how you can fix it at your end without leaving any [cybersecurity gap](https://www.chubb.com/vn-en/articles/10-common-gaps-in-cyber-security.html) open in your email ecosystem. ## What is the “554 5.7.5 Permanent Error Evaluating DMARC Policy” error? _This error prompts when the intended recipient’s mail server fails to evaluate the [DMARC policy](https://knowledgebase.constantcontact.com/email-digital-marketing/articles/KnowledgeBase/7644-What-is-DMARC?lang=en%5FUS) for emails sent from your domain._ This causes emails to either be marked as spam or rejected from entering the mailbox altogether. This inaccuracy in evaluating the DMARC policy can be due to misconfigurations in your [SPF](/blog/what-is-spf-email-a-guide-to-sender-validation-technology/), DKIM, and DMARC records. ### SPF record misconfigurations triggering the “554 5.7.5 Permanent Error Evaluating DMARC Policy” error An [SPF record](/spf-record-checker/create-spf-record/) is a TXT format record that includes all the IP addresses and mail servers officially authorized by you to send emails on your organization’s behalf. _Upon reception, the receiving server first retrieves the SPF record corresponding to the sender’s domain and verifies if the sender’s IP address or mail server is listed in it._ DMARC policy evaluation is heavily dependent on SPF records, a [misconfigured SPF record](https://www.bleepingcomputer.com/news/microsoft/hotmail-email-delivery-fails-after-microsoft-misconfigures-dns/) means a problematic DMARC authentication exercise. Here are the common errors you may encounter in your SPF record- - Missing SPF record: This means there is no SPF record corresponding to your domain. - Multiple SPF records: Having more than one SPF record for a domain can cause [email delivery issues](https://www.iplocation.net/email-delivery-problems). _There should only be one SPF record per domain_. - Syntax errors: SPF records must follow a specific syntax. _Common syntax errors include missing or extra characters, incorrect use of qualifiers, and improper format_. - Too many DNS lookups: The SPF specification limits the number of [DNS lookups](/spf-too-many-dns-lookups/permerror-spf-permanent-error-too-many-dns-lookups/) to 10\. Exceeding this limit can cause the SPF check to fail. - Incorrect mechanisms: Using incorrect mechanisms, such as including IP addresses that don’t send emails on behalf of your domain or using mechanisms like +all, which allows all IP addresses, can lead to [security vulnerabilities](https://www.spiceworks.com/it-security/vulnerability-management/articles/what-is-a-security-vulnerability/). - Overly permissive policies: _Using +all at the end of the SPF record allows all IP addresses to send emails on behalf of your domain, which defeats the purpose of having an SPF record._ - Missing ‘include’ statements: If you use third-party services to send email (like marketing platforms or [email gateways](https://expertinsights.com/insights/what-are-email-security-gateways-how-do-they-work-and-what-can-they-offer-your-organization/)), you need to include their SPF records using the [include mechanism](/spf-validator/spf-syntax/). Missing these can result in failed SPF checks. - Typos in domain names: Typographical errors in domain names within the SPF record can cause legitimate emails to fail SPF checks. - Unupdated SPF records: Not updating SPF records when there are changes in your [email-sending infrastructure](https://www.voilanorbert.com/blog/email-infrastructure/) can lead to failed SPF checks. This includes adding new mail servers or changing [third-party email providers](/blog/major-email-service-providers-emphasize-dmarc-deployment/). - Not using ‘-all’ or ‘\~all’ qualifiers: The -all (fail) or \~all ([softfail](/blog/spf-softfail-or-spf-hardfail/)) qualifiers are important as they define the default policy for all IPs not listed in the SPF record. Not including one can result in unintended consequences. - Using the ‘ptr’ mechanism: The [ptr mechanism](/blog/why-avoid-using-spf-ptr-mechanisms-email-authentication-security/) is deprecated and should not be used. It is also slow and can lead to DNS lookup limits being exceeded. - Unnecessary use of ‘redirect’: The redirect mechanism should only be used when necessary. _Unnecessary use can complicate the SPF record and lead to confusion_. - Misconfigured ‘ipv4’ and ‘ipv6’ mechanisms: Ensure that the IP addresses specified with ipv4 and ipv6 mechanisms are correct and in the proper format. There are other SPF issues also that your record may encounter, but we have mentioned the commonly occurring ones. If your SPF record doesn’t have any of the above-listed errors and is still not working properly, then [reach out to us](/contact-us/). We can take care of the stubborn technical issues. ### DKIM record misconfigurations triggering the “554 5.7.5 Permanent Error Evaluating DMARC Policy” error [DKIM](/10-reasons-for-regular-spf-record-checks-in-cybersecurity/dkim-record-check/) is based on [cryptographic keys](https://www.thesslstore.com/blog/cryptographic-keys-101-what-they-are-how-they-secure-data/) that fulfil the purpose of verifying if an email has been sent from one of the officially authorized mail servers. The first key, called the private key, is known only to the domain owner. The second key, called the public key, is openly available so that recipients’ mail servers can retrieve it. Both the keys are related to each other, a message encrypted by a [private key](https://www.techtarget.com/searchsecurity/definition/private-key) only gets decrypted by its corresponding public key, otherwise, the decryption doesn’t happen, and DKIM verification fails. ![error](https://media.mailhop.org/autospf/images/2024/07/multiple-spf-records-5145.jpg) When you turn on DKIM for your domain, a [digital signature](https://en.wikipedia.org/wiki/Digital%5Fsignature) is added to the headers of all outgoing emails, which the recipients’ mail servers match with the public key. Here are the common errors you may encounter in your DKIM record- - No DKIM signature: Your mail server is not configured to sign all outgoing emails with a valid DKIM signature. This is a common DKIM issue. - Incorrect DNS record: The public DKIM key for your record has to be published properly in the DNS. Typos, missing semicolons, incorrect key format, or publishing the key in the wrong DNS record are some general faux pas by domain administrators. - Mismatched selector: There should be a full-fledged match between the [selector](https://support.google.com/a/answer/11611356?hl=en#:~:text=The%20DKIM%20selector%20%28also%20called,set%20to%20the%20default%2C%20google.) used in the DKIM signature and the selector in the [DNS record](https://www.ibm.com/topics/dns-records); otherwise, DKIM will fail. - Invalid or expired keys: _Do not use DKIM keys that are invalid or expired_. We also recommend that you rotate your [DKIM keys](/blog/when-should-you-rotate-your-dkim-keys/) regularly, as it’s one of the best practices for [email security](/blog/spf-best-practices-cisos-guide-to-email-security/). - Improper key length: Using a key that is too short (e.g., less than 1024 bits) can be a security risk. For stronger security, the best practice is to use at least a 2048-bit key. - Misconfigured mail servers: All of the mail servers that you use for sending emails on behalf of your organization should be configured to sign emails with DKIM. - Key mismanagement: Proper management of DKIM keys is essential. _This includes securely storing private keys, not sharing them unnecessarily, and ensuring they are backed up._ ### DMARC record misconfigurations triggering the “554 5.7.5 Permanent Error Evaluating DMARC Policy” error Incomplete or misconfigured DMARC settings can cause the “554 5.7.5 Permanent Error Evaluating DMARC Policy” issue. [DMARC](/10-reasons-for-regular-spf-record-checks-in-cybersecurity/dmarc-record-check/) is an email authentication protocol that uses SPF and DKIM records to specify how email servers should handle messages that fail authentication. #### Key DMARC policies - \`p=none\`: Allows emails to pass even if they fail authentication. - \`p=quarantine\`: Sends failed emails to the spam or quarantine folder. - \`p=reject\`:Blocks failed emails outright. #### Issues on the recipient’s side _The recipient server may have its own policies affecting DMARC evaluation, such as redirecting failed emails to spam or rejecting them._ #### Ensuring proper configuration - Align your email settings with the recipient’s policies. - Collaborate with the recipient to understand and adapt to their DMARC settings to resolve the “554 5.7.5 Permanent Error Evaluating DMARC Policy” issue. ![Misconfigurations in DNS](https://media.mailhop.org/autospf/images/2024/07/spf-record-checker-2.jpg) ## How Do You Fix the “554 5.7.5 Permanent Error Evaluating DMARC Policy” error? To eliminate this issue from your DMARC, you need to review SPF, DKIM, and DMARC records. Start by running them through [valid lookup tools](/blog/spf-record-lookup-a-much-needed-diagnosis/) to understand what’s wrong with them. _Ensure all the authorized IP addresses and hostnames are listed in your SPF record_. Also, some email service providers don’t support SPF and DKIM-aligned emails, prompting the “554 5.7.5 Permanent Error Evaluating DMARC Policy” error. So, check what is supported and allowed by your email service provider and make the necessary adjustments and configurations. You can also think about migrating to another email service provider that supports [SPF and DKIM alignment](https://www.spamresource.com/2019/09/spf-and-dkim-alignment-what-are-they.html) or adjusts within the settings with your current provider to ensure alignment. As for DMARC, temporarily change the DMARC policy from strict (p=quarantine or p=reject) to lenient (p=none). This adjustment will allow your emails to pass authentication checks and not land in the spam folders while you take your time to address the underlying technical problems. _Once you have fixed the problem, go back to applying either of the strict policies to stay protected from [impersonation](https://www.darkreading.com/cyberattacks-data-breaches/how-the-okta-cross-tenant-impersonation-attacks-succeeded) and [phishing attacks](https://cybersecuritynews.com/weaponized-documents-qr-code-phishing/)_. We also suggest you ditch the idea of manually generating SPF, DKIM, and DMARC records, as this approach is more prone to retaining inconsistencies and other errors. _You may end up adding extra characters, symbols, or spaces while copy-pasting._ Also, if your SPF record has exceeded the lookup limit and needs a tool to shrink it, use our [SPF flattening](/) tool. ## Topics [ DKIM ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/)[ SPF record ](/tags/spf-record/) ![Vishal Lamba](https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg) [ Vishal Lamba ](/authors/vishal-lamba/) Content Specialist Content Specialist at AutoSPF. Writes vendor-specific SPF configuration guides and troubleshooting walkthroughs. [LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) ## Related Articles [ Advanced 10m AutoSPF’s Guide to Configuring SPF & DKIM for Avanan: A Detailed Walk-through Nov 26, 2025 ](/blog/autospf-guide-configuring-spf-dkim-for-avanan-detailed-setup-walkthrough/)[ Advanced 24m Best DNS Security Tools for Email in 2026 SPF, DKIM & DMARC Management Compared Apr 28, 2026 ](/blog/best-dns-security-tools-email-2026-spf-dkim-dmarc-compared/)[ Advanced 23m Best Email Authentication Tools For Enterprise in 2026 The Complete Guide Apr 30, 2026 ](/blog/best-email-authentication-tools-enterprise-2026-complete-guide-solutions/)[ Advanced 30m Best SPF Management Tools for MSPs in 2026 A Buyer’s Guide Apr 27, 2026 ](/blog/best-spf-management-tools-for-msps-in-2026-buyers-guide/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"What is the ‘554 5.7.5’ permanent error in DMARC and how to fix it?","description":"The response from the remote server was: DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From.","url":"https://autospf.com/blog/554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it/","datePublished":"2024-07-09T16:57:35.000Z","dateModified":"2026-04-18T02:36:41.000Z","dateCreated":"2024-07-09T16:57:35.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://autospf.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes AutoSPF's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it/"},"articleSection":"advanced","keywords":"DKIM, DMARC, email security, SPF record","wordCount":1466,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/images/2024/07/spf-record-office-365-4110.jpg","caption":"permanent error","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Advanced","item":"https://autospf.com/advanced/"},{"@type":"ListItem","position":4,"name":"What is the ‘554 5.7.5’ permanent error in DMARC and how to fix it?","item":"https://autospf.com/blog/554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it/"}]} ```