Email Deliverability & Enable DKIM/SPF Globally

vatra

• October 25, 2023 08:27

Email Deliverability Regarding the SPF record in the "Email Deliverability" interface, why are accounts' dedicated IPs added to the server's (hostname's) SPF record? Is that normal behavior? Note that I have enabled "Send mail from the account"s IP address" in Exim. Enable DKIM/SPF Globally What is the default behavior when creating the SPF, does cPanel add server IP + dedicated IP (if the account has it) in the record?

• 

  cPRex Jurassic Moderator

  • October 25, 2023 17:01

  Hey there! The dedicated IPs get added to the hostname's record as a "just in case" measure - we'd hate to see an email leave the server from one of the dedicated IPs and have it not be verified because we didn't include it. In general, it's best to configure your PHP scripts so they authenticate to a valid email user, as that ensures the "sender" field is always a real email account instead of the hostname. Yes, if you have the global option enabled, both IPs will be added to the SPF record. Here is the test I performed showing this, where .192 is the dedicated IP: deditest.com. 14400 IN TXT "v=spf1 +a +mx +ip4:10.2.32.191 +ip4:10.2.32.192 ~all"
  

  0
• 

  vatra

  • October 25, 2023 21:07

  I presume all dedicated IPs on the server are added to the hostname SFP? By default, mail is sent using server IP, unless you configure dedicated IPs in Exim to send as well. Either you choose, including them both in the hostname's SPF and in domains under dedicated IPs' SPF is a good preventive measure. Most people would rarely use the hostname for creating email addresses and sending mail anyway so the Email Deliverability option is rarely needed.

  0
• 

  cPRex Jurassic Moderator

  • October 25, 2023 21:47

  Correct!

  0

Please sign in to leave a comment.