Dmarc record not taking the changes

Dylan McKinstry

• May 22, 2025 20:17

I have used this article to help try to change my dmarc records at the global level but it is not putting in the correct one.

Introduction

You may use the following procedure to ensure that newly created accounts and domains get a basic DMARC record by default.

 

Procedure

1. Login to WHM as the root user
2. Navigate to: "Home » DNS Functions » Edit Zone Templates"
3. Click on the "Standard" template
4. Review the following example DMARC record, customize it to your needs, and then add it to the bottom of the template:

   _dmarc IN TXT v=DMARC1\;p=quarantine\;sp=none\;adkim=r\;aspf=r\;pct=100\;fo=0\;rf=afrf\;ri=86400\;rua=mailto:dmarc\@%domain%\;ruf=mailto:dmarc\@%domain%

5. Click the blue "Save" button

Whenever you create a new account or domain, it will have the above DMARC record added to it.

In order to receive DMARC aggregate and error reports, the domain owner must create an email account that matches the rua and ruf options included in the DMARC record that you just added to the template in step 4 above.

The basic DMARC record in the above example has the following settings:

• Policy: Quarantine
• Subdomain Policy: None
• DKIM Mode: Relaxed
• Percentage: 100
• Generate Failures When: All checks fail
• Report Format: AFRF
• Report Interval: 86400
• Send Aggregate Mail Reports To: dmarc@newlycreatedomainexample.tld
• Send Failure Reports To: dmarc@newlycreatedomainexample.tld

Defaulting back to v=DMARC1; p=none;

This what my standard and all my DNS Templates look like:

; cPanel %cpversion%

; Zone file for %domain%

$TTL %ttl%

@      %nsttl% IN      SOA     %nameserver%. %rpemail%. (

%serial%; serial, todays date+todays

3600; refresh, seconds

1800; retry, seconds

1209600; expire, seconds

86400 ); minimum, seconds

 

%domain%. %nsttl% IN NS %nameserver%.

%domain%. %nsttl% IN NS %nameserver2%.

%domain%. %nsttl% IN NS %nameserver3%.

%domain%. %nsttl% IN NS %nameserver4%.

 

%nameserverentry%. IN A %nameservera%

%nameserverentry2%. IN A %nameservera2%

%nameserverentry3%. IN A %nameservera3%

%nameserverentry4%. IN A %nameservera4%

 

%domain%. IN A %ip%

%domain%. IN AAAA %ipv6%

ipv6 IN AAAA %ipv6%

 

%domain%. IN MX 0 %domain%.

 

mail IN CNAME %maildomain%.

www IN CNAME %domain%.

ftp IN CNAME %domain%.

 

_dmarc.%domain%. IN TXT "v=DMARC1\; p=quarantine\; sp=none\; adkim=r\; aspf=r\; pct=100\; fo=0\; rf=afrf\; ri=86400\; rua=mailto:dmac@example.com\; ruf=mailto:dmac@example.com"

• 

  quietFinn

  • May 22, 2025 22:23

  In WHM -> Server Configuration -> Tweak Settings -> Domains
  there is:
  Enable DMARC on domains for newly created accounts
  

  Doesn't that work for you?

   

  0
• 

  Dylan McKinstry

  • May 22, 2025 22:25

  It is already enabled. But I my changes aren't coming through.

  0
• 

  quietFinn

  • May 22, 2025 22:44

  I was thinking you might have to have that disabled, but I didn't get it to work either.

  0
• 

  cPRex Jurassic Moderator

  • May 27, 2025 15:33

  This is a known issue we're tracking in CPANEL-46611.  It was just created a few weeks ago so it hasn't received any action yet, but I've added a link to this thread to it so the developers are aware of all reports of this problem.

  If I hear any updates on my end I'll be sure to post!

  0

Please sign in to leave a comment.