DKIM/SPF on Addon domains

[rinkleton]

All of a sudden last week customers started complaining that email wasn't being delivered. I checked it out and SPF and DKIM are now failing. We haven't changed anything as far as our configuration. The failures are specific to addon domains. I looks like the speciific issue is in what zone the SPF and DKIM records are being put. When you create an addon domain, it creates a separate zone, however when SPF and DKIM are enabled, it puts the records in the top level zone as if they were for alias domains. Manually moving them to the addon zone does fix the issue.

I had submitted a bug a while ago which was semi related. When creating an addon domain and enabling SPF, then deleting the addon domain, it left the SPF record existing which caused all kind of issues trying to re-add the addon. It seems like addon domains with SPF still has some issues. Or maybe they tried to fix that issue and caused another?

But I digress.... is there any way to configure it to put the spf in the right zone, or some easy work around?

WHM 64.0b24

 

[cPanelMichael]

Hello,

I've been unable to replicate this behavior. Upon adding a new addon domain name, the TXT records for SPF and DKIM are correctly populated in the zone file of the addon domain name. I was also unable to replicate this issue when manually enabling SPF/DKIM via the "Authentication" option in cPanel. Are you checking the addon domain name's TXT records in the /var/named/$domain.tld.db file, and through "WHM >> Edit DNS Zone"? If not, are you sure the DNS for the addon domain name is managed by the cPanel server?

Thank you.

 

[rinkleton]

Yes I see them the way I describe both through WHM and the files you reference.

The DNS is managed by the cpanel server, which should be evidenced by the fact that if I manually move the TXT records to the addon domain zone it starts to validate.... Correct?

I contacted our data center and they said they are seeing the same behavior I am. Is there some configuration option that would cause this?

 

[cPanelMichael]

Hello,

Could you open a support ticket using the link in my signature so we can take a closer look at the affected system to see what's happening?

Thank you.

 

[rinkleton]

I'll be opening a ticket.

One thing I forgot to mention was that it only happens when the addon domain is a subdomain of the main domain.
Ex: parking sub.example.com on example.com

 

[cPanelMichael]

Hello,

To update, CPANEL-13927 is open to address an issue where the DKIM and SPF records (for addon domain names that are subdomains of the primary domain name on the account) are placed in the zone file of the primary domain name. I'll monitor this case and update this thread with more information as it becomes available.

Thank you.