Skip to main content

Default SPF record including primary domain

brt
First of all, I've got to say that I'm disappointed in the new Email Deliverability section. It's taken an interface that was straightforward and simple and made it into something way more complicated than it needs to be. My problem is that it appears the new Email Deliverability interface is adding my primary domain [example.com] as a default SPF include, and this is not how we have things set up and I don't see a way to disable it. I -do- use [spf.example.com] as my include, as this covers all of our hosting IPs and smarthosts, etc., so I can understand having a default include, but I don't understand why it's just randomly choosing one. Is there a way to change this behavior?

Comments

10 comments

Date Votes
  • cPanelLauren
    First of all, I've got to say that I'm disappointed in the new Email Deliverability section. It's taken an interface that was straightforward and simple and made it into something way more complicated than it needs to be.

    I'm sorry to hear that, what about it do you feel isn't straightforward? My personal feeling on it is that it solves some issues that we had with understanding which domain you were currently working with but we'd love to hear feedback.
    My problem is that it appears the new Email Deliverability interface is adding my primary domain [example.com] as a default SPF include, and this is not how we have things set up and I don't see a way to disable it.

    Can you show me an example of this? I've got a few domains set up as addons +subdomains and I'm not seeing this occur.
    0
  • brt
    This isn't in regard to any addon or alias, etc. domains, it's more this: Server hostname is server.hostco.tld. Client domain is clientdomain.tld. When I go to the Email Deliverability section for any client domains, it's trying to add hostco.tld as a default SPF include. (specifically as an include, like you'd add Mailchimp's inclusion).
    0
  • cPanelLauren
    HI @brt That's where I'm not able to replicate though, on my test server I'm not seeing any include being added. 57145 Which makes me curious about customizations you might have that are causing this to be added, do you have anything of note in /etc/exim.conf.local? Thanks!
    0
  • brt
    I don't believe I've customized anything there, but certainly not recently, and this appears to be a change with v78. Here's an example from a brand new account I created today, and it's showing the xxxx.net being included by default. The domain included there is specifically the parent domain of the server hostname. 57201
    0
  • cPanelLauren
    Hi @brt Interesting I'm not seeing this at all: 57205 Are you by chance doing this from a reseller account?
    0
  • brt
    The account was created as root and then moved under a reseller. The screenshot above is logged in as root. That screenshot is under "Modify an Account" though, not "Email Deliverability." Here is the same domain under Email Deliverability, with the same domain included automatically. (Ignore the nameserver warning, this is a brand new registration and nameservers aren't updated yet) 57209
    0
  • cPanelLauren
    Hi @brt What do you have set for the following in WHM>>Service Configuration>>Exim Configuration Manager: SPF include hosts for all domains on this system Autodiscovery SPF include hosts from the smarthost route list
    0
  • brt
    Autodiscovery SPF include hosts from the smarthost route list

    Aha! This is the one. Thank you! I'd rather use the first one you mentioned, "SPF include hosts for all domains on this system", as then I can set the proper one. However, can you tell me what happens if I input my 'spf.example.com' here as far as existing records? (I'm hoping it doesn't change anything existing and only applies to new domains or when enabling SPF.
    0
  • cPanelLauren
    However, can you tell me what happens if I input my 'spf.example.com' here as far as existing records?

    I can confirm it does indeed change existing records - the following is from a domain previously on the system which did not have the include added: 57245
    0
  • todo1991
    Hello, I followed this post and noticed the problem I was looking for. I want the default spf to not add mainIP itself, ex record sfp default: v=spf1 +a +mx +ip4:x.x.x.x. ~all) Now, instead of prescribing the mainIP available, I want to switch to include the txt record of the domain like this: v=spf1 +a +mx include spf1.domain.ltd ~all in the configuration section SPF include hosts for all domains on this system of exim, I have configured it further: spf1.domain.ltd This results in the default SPF record being changed to: v=spf1 +a +mx +ip4:x.x.x.x include spf1.domain.ltd ~all The problem here is that I want to configure the IP list included in txt record of spf1.domain.ltd. I want the default mainIP remove system. This is useful when changing the IP sending mail when the domain is not using the dnscluster in the system. Because the spf txt records have been configured IP sendmail(mainIP) in spf1.domain.ltd, there is no need to notify the customer to reconfigure the spf record to change the IP send mail. Any infomation for this? Thank all!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post