SPF specifies that the variety of mechanisms and variables that perform DNS lookups per SPF search not exceed 10, along with any lookups triggered by the use of the "include" function or the "redirect" modifier. This is to prevent possible denial of service attacks. Instead, an SPF PermError would be returned, explicitly "SPF PermError: too many DNS lookups."