SPF does not update IP address automatically

[andryangouw]

Hi All,

I believe this is more of a concept/design bug (thus, must be fixed) rather than a feature request, but since Greg Kuiper suggested me to post here, so here it is..

SPF ip4 parameter is not updating automatically when "Automatically send outgoing mail from the account's IP address instead of the main IP address." option is enabled in WHM. I guess there is 1 step missing from this automatic option.

How to reproduce: Create a new user account, assign this account to a shared IP, enable SPF on this account, enable "Automatically send outgoing mail from the account's IP address instead of the main IP address." in WHM's Exim Configuration, change site's IP address on that newly created account to a dedicated IP. The SPF record will still show the old IP instead of the new one.

By the time the outgoing IP for a particular domain has been changed, SPF should change automatically too, otherwise this is considered as an invalid behavior. SPF-checking mail servers would find the SPF record invalid as the advertised "allowed IP address" does not match anymore, therefore failing SPF check.

"Additional Ip blocks for your domains (IP4)" on the cPanel's Email Authentication page is also wrong. I guess this is the source of the issue because it says: "The main server interface ip cannot be removed from this list if it is present. The following ip is the main server interface ip: W.X.Y.Z", so I assume the SPF record template grabs the IP from there.

What do you guys think?

[jmginer]

Hello,
i changed the IP of more than 100 websites... how to change the SPF record of all dns records with the new IP? not by hand
Thanks.

[cPanelDon]

Hi All,

I believe this is more of a concept/design bug (thus, must be fixed) rather than a feature request, but since Greg Kuiper suggested me to post here, so here it is..

SPF ip4 parameter is not updating automatically when "Automatically send outgoing mail from the account's IP address instead of the main IP address." option is enabled in WHM. I guess there is 1 step missing from this automatic option.

How to reproduce: Create a new user account, assign this account to a shared IP, enable SPF on this account, enable "Automatically send outgoing mail from the account's IP address instead of the main IP address." in WHM's Exim Configuration, change site's IP address on that newly created account to a dedicated IP. The SPF record will still show the old IP instead of the new one.

By the time the outgoing IP for a particular domain has been changed, SPF should change automatically too, otherwise this is considered as an invalid behavior. SPF-checking mail servers would find the SPF record invalid as the advertised "allowed IP address" does not match anymore, therefore failing SPF check.

"Additional Ip blocks for your domains (IP4)" on the cPanel's Email Authentication page is also wrong. I guess this is the source of the issue because it says: "The main server interface ip cannot be removed from this list if it is present. The following ip is the main server interface ip: W.X.Y.Z", so I assume the SPF record template grabs the IP from there.

What do you guys think?

As seen in the applicable DNS zone, what is the exact SPF record that was created via cPanel?

[andryangouw]

Hi Don,

The SPF record is set to the main shared IP instead of the new dedicated IP. Please check ticket id 733513 for more information.


Regards,
Andryan

[cPanelDon]

Hi Don,

The SPF record is set to the main shared IP instead of the new dedicated IP. Please check ticket id 733513 for more information.

Regards,
Andryan

It is normal for the main server IP address to always be specified in the SPF record that is setup by cPanel; the dedicated site IP address, if any is assigned, is accounted for by the A and MX records. For additional reference, please see the following post: cPanel Forums - View Single Post - Spam for same email