4. SPF records exist to accompany 'A' records for 'balug.org.', 'lists.balug.org.', and 'temp.balug.org', but not for any of the other 'A' records. Given that those FQDNs do not originate mail, it's a very good idea to have an SPF declaration for each that says it doesn't originate mail.
I believe the SPF records for 'temp.balug.org' should now be amended to say it originates no mail.