Is this how I set up SPF

Question

SPF

For example, my domain is mydomen.ru.
I created a DNS record:
@ TXT v=spf1 include: mydomen.ru ~all
When sending a letter from [email protected], this header comes up:
Authentication-Results: mxs.mail.ru; spf=permerror (mx113.mail.ru: error in processing during lookup of domain of mydomen.ru: include: or redirect= caused unlimited recursion) [email protected] smtp.helo=mydomen.ru
Received-SPF : permerror (mx113.mail.ru: error in processing during lookup of domain of mydomen.ru: include: or redirect= caused unlimited recursion) client-ip=XX.XX.XX.XX; [email protected]; helo=mydomain.com;
I hid the client-ip.
And here is the title from the gmail:
Received-SPF: permerror (google.com: domain of [email protected] uses a mechanism not recognized by this client. unknown mechanisms: )) client-ip=XX.XX.XX.XX;
Authentication-Results: mx.google.com; spf=permerror (google.com: domain of [email protected] uses a mechanism not recognized by this client. unknown mechanisms: ))
[email protected] SPF?

Answer 1

No, it's wrong.
You have created a record that "redirects" an SPF record from your domain to your domain. Which is basically nonsense.
Well, they also forgot the quotes, but I’m already thinking about the dns-server configs right away, quotes may not be required in the web face of the hoster.
The correct SPF record for your case should look something like this:
@ IN TXT "v=spf1 ip4:10.0.0.0 a mx ~all"
ip4:10.0.0.0 - here you specify the ipv4 address of the server from which you send domain mail (there is and ip6;... directive, if anything)
a - indicate that the server pointed to by the A-record of the domain can send mail from this domain.
mx - specify that the servers pointed to by the mx-records of the domain can send mail from this domain.
Accordingly, if you send mail from the same server where you have the site itself or its mail, the following entry will be enough:
@ IN TXT "v=spf1 a mx ~all"
Quotes in the bind9 config must be mandatory, about quotes in the webmord check with the hoster / registrar / where you make dns records there.

Answer 2

It seems that authorization went through SFP, can you look at the rest of the records, are there any obvious problems?