"No DKIM record found": usually the checker asked for the wrong selector. How to find the right one in an email header.
A DKIM key has no fixed address. It lives at selector._domainkey.[your domain], and the selector is chosen by whoever signs your mail. DNS has no query that...
SPF "too many DNS lookups" (PermError): how to count them, and why it only breaks for some of your senders.
RFC 7208 sets the limit at 10. What counts:
• include, a, mx, ptr, exists and redirect: 1 lookup each, including the ones nested inside your providers' includes.
• ip4, ip6...