Cannot create custom DMARC for server root?

pkiff

• February 07, 2025 15:15

When I try to create a custom DMARC record for my server's root domain (the one that matches my helo), I get an error: 
"Error: API failure: (XID f3u7gx) The domain must be owned by a user other than "root" "

If I use the new "Email DNS Record Manager" interface in WHM, I can press the button to "Apply DMARC Policy", which results in the default cPanel "none" policy being written as a DMARC record in the same domain:
v=DMARC1; p=none;

I can delete that record. And recreate it by pressing the button again.
But I can't customize it or create my own new DMARC record.

How do I edit the server's DMARC?

Do I have to do it manually on the command line, or?

Any advice?

• 

  cPRex Jurassic Moderator

  • February 07, 2025 21:43

  Hey there!  I believe my reply in the other thread took care of this issue as well.  The only workaround at this point would be to edit the zone on the command line.

  0
• 

  pkiff

  • February 07, 2025 21:53
  • Edited

  Thanks. I think I found another workaround for this one. If you delete the DMARC record in your server's DNS Zone via WHM, then you may be able to create a DMARC record via cPanel for the parent domain. And then you can customize that DMARC record like any other via cPanel's DNS Zone Editor, adding a subdomain policy that matches the parent domain if desired.
  
  So, if my server hostname is [sub.example.tld], then I can create a domain in cPanel for the parent domain [example.tld]. Then if I delete the default DMARC record via WHM for [sub.example.tld], I can add a custom DMARC via cPanel for the parent [example.tld] that will cover the case of [sub.example.tld] as well.
  
  In my case, I had already created the parent domain in cPanel for a different reason, so it was easy enough to just add the DMARC there instead. Obviously, some care has to be taken not to mess up the hostname DNS when fiddling with the parent domain DNS!

  1
• 

  Francisco Jose

  • February 24, 2025 11:13

  Same issue here, if a TXT record contains DMARC code i get the same error, only way to workaround this was to manually edit the file

  0
• 

  gerardo altman

  • April 04, 2025 10:01

  Hey cPRex

  Can you please link to the other thread as this seems to be a new issue, never had a problem with this before.

  The DNS zone in question does not belong to a cPanel account so its just a stand alone DNS zone.

  please advise

  ""Cheers

  G

  0
• 

  pkiff

  • April 04, 2025 13:56

  gerardo altman The "other thread" referred to above by cPRex is this one:
  https://support.cpanel.net/hc/en-us/community/posts/29828497224087-Edit-default-DMARC-record-for-Mass-Record-Creation

  I don't think that the functionality has yet been added to WHM.
  
  So your current options I think are either to manually edit the DNS files using the command line as suggested in that other thread. Or do what I suggest above in this thread, which is to create a matching zone from within one of your cPanel accounts, and then customize the DMARC record of the zone there.

  0
• 

  cPRex Jurassic Moderator

  • April 04, 2025 15:10

  Correct - that isn't something that has been added to WHM yet.

  0

Please sign in to leave a comment.