Build a single v=spf1 string. Publish it as a TXT record on the domain that sends mail, then verify with the SPF checker.
v=spf1
v=spf1 mx ~all
Stay under ten DNS lookups across nested includes. Do not create a second SPF TXT on the same name.
