Email Authentication Warnings regarding SPF and DomainKeys

dwinans

Member
PartnerNOC
Jan 23, 2009
16
1
51
We have an account that is displaying the following warnings when enabling SPF and Domain Keys.

Status: Enabled, WARNING: DomainKeys cannot be used because this server is not a DNS server for domain.com

Status: Enabled, WARNING: SPF cannot be used because this server is not a DNS server for domain.com

We are running a DNS cluster setup.

SPF and DomainKeys are properly setup. The zone file was edited as it should be and the propagation took place as expected. Things are great there. However these warnings still remain within cPanel. I've attempted to disable/re-enable SPF and DomainKeys, no difference. The warnings still remain.

Other accounts setup the exact same way are not having this problem. Using the same name-servers. I see no difference there. So there isn't a mis-configuration in the DNS settings that I can see.

When creating an account there is an option you can check that says the following.

"Use the nameservers specified at the Domain's Registrar (ignore locally specified nameservers)"

I can see this changes the name-server records in the DNS zone to use whatever the registrar has specified. But through my testing this doesn't look to be the culprit. The name-servers that are specified in the zone file are the correct ones. (I also might add the ones at the registrar level are the same as the ones at the local level)

I've searched online for any information regarding resolution to this error but I've found nothing. Any ideas on further things to check?
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
We have an account that is displaying the following warnings when enabling SPF and Domain Keys.

Status: Enabled, WARNING: DomainKeys cannot be used because this server is not a DNS server for domain.com

Status: Enabled, WARNING: SPF cannot be used because this server is not a DNS server for domain.com

We are running a DNS cluster setup.

SPF and DomainKeys are properly setup. The zone file was edited as it should be and the propagation took place as expected. Things are great there. However these warnings still remain within cPanel. I've attempted to disable/re-enable SPF and DomainKeys, no difference. The warnings still remain.

Other accounts setup the exact same way are not having this problem. Using the same name-servers. I see no difference there. So there isn't a mis-configuration in the DNS settings that I can see.

When creating an account there is an option you can check that says the following.

"Use the nameservers specified at the Domain's Registrar (ignore locally specified nameservers)"

I can see this changes the name-server records in the DNS zone to use whatever the registrar has specified. But through my testing this doesn't look to be the culprit. The name-servers that are specified in the zone file are the correct ones. (I also might add the ones at the registrar level are the same as the ones at the local level)

I've searched online for any information regarding resolution to this error but I've found nothing. Any ideas on further things to check?
What is the full cPanel version number?

Does the domain use any DNS/name servers that are not controlled by the cPanel DNS Clustering configuration?

Does the server that hosts the domain serve as one of the registered DNS/name servers for the domain name?

Is the domain name setup on a dedicated IP address?
 

dwinans

Member
PartnerNOC
Jan 23, 2009
16
1
51
What is the full cPanel version number?

11.25.0-EDGE_42335

Does the domain use any DNS/name servers that are not controlled by the cPanel DNS Clustering configuration?

No, but it may appear that way. We have setup custom name-servers for the reseller. These custom name-servers are setup as aliases on our clustered DNS servers. Any changes to zone files on any local WHM/cPanel server get propagated to our DNS cluster servers.

The client is hosting 9 domains on the same server. 2 of them have this issue, the rest do not show this warning. All of them via the whois point to the same set of custom name-servers.

Does the server that hosts the domain serve as one of the registered DNS/name servers for the domain name?

We do not run DNS locally on each WHM/cPanel server. However the domain they are using for the custom name-servers is hosted on the same server. DNS is handled by our clustered DNS servers.

Is the domain name setup on a dedicated IP address?

There are 2/9 accounts experiencing the issue. One is on a dedicated IP, one is not. These 2 domains are on separate packages as well.
 

dwinans

Member
PartnerNOC
Jan 23, 2009
16
1
51
FYI, I've submitted a ticket on this. I'll give an update once the problem is resolved.
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
What is the full cPanel version number?
11.25.0-EDGE_42335

Does the domain use any DNS/name servers that are not controlled by the cPanel DNS Clustering configuration?
No, but it may appear that way. We have setup custom name-servers for the reseller. These custom name-servers are setup as aliases on our clustered DNS servers. Any changes to zone files on any local WHM/cPanel server get propagated to our DNS cluster servers.

The client is hosting 9 domains on the same server. 2 of them have this issue, the rest do not show this warning. All of them via the whois point to the same set of custom name-servers.

Does the server that hosts the domain serve as one of the registered DNS/name servers for the domain name?
We do not run DNS locally on each WHM/cPanel server. However the domain they are using for the custom name-servers is hosted on the same server. DNS is handled by our clustered DNS servers.

Is the domain name setup on a dedicated IP address?
There are 2/9 accounts experiencing the issue. One is on a dedicated IP, one is not. These 2 domains are on separate packages as well.
FYI, I've submitted a ticket on this. I'll give an update once the problem is resolved.
Thank you for the detailed information. When possible, please PM me the support request ID number from the ticket submission so I may review the details and follow-up internally.
 
Last edited:

jackal

Well-Known Member
PartnerNOC
Feb 23, 2002
708
0
316
Did this ever get resolved, we are also seeign this on a few servers.

Joey
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Did this ever get resolved, we are also seeign this on a few servers.

Joey
Regarding the original inquiry in the thread I did not receive a ticket number for further investigation.

To confirm, what is the full cPanel version of the affected servers? If a support request was submitted it will help greatly to also provide the ticket number so I may review the details involved.
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Regarding the original inquiry in the thread I did not receive a ticket number for further investigation.
I believe I found the ticket information. The noted details indicate it may be related to an active internal case, ID #4891; this could be referenced if a support request is submitted. Depending on the circumstances involved it may or may not depend on further examination and resolution in the aforementioned case.
 

l00ph0le

Member
Aug 16, 2007
23
0
51
Be advised, I am running 11.25 and I am gettign this when using external dns servers..

The DNS servers are listed in cpanel as the name servers for the server..However, I keep getting these warnings on the server.
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Be advised, I am running 11.25 and I am gettign this when using external dns servers..

The DNS servers are listed in cpanel as the name servers for the server..However, I keep getting these warnings on the server.
If the issue persists I would consider escalation via a ticket so that the issue may be properly diagnosed and thoroughly investigated while inspecting the affected system. For reference, the links in my forums signature may be used to initiate a ticket submission, such as via the following: Support Options; when available, please send me a PM me referencing this thread and your new ticket ID number so I may follow-up internally.
 

hbidad

Well-Known Member
Apr 16, 2005
74
1
158
I had the same issue. However, oddly enough there was a Key already in place. I manually removed the entry and it started to work the cPanel. This has happened a few times now.

Hope it helps for you guys.
 

Kent Brockman

Well-Known Member
PartnerNOC
Jan 20, 2008
1,272
63
178
Buenos Aires, Argentina
cPanel Access Level
Root Administrator
Hi there. I'm experiencing the same issue as dwinans since some months ago. I cannot recall with what cPanel update started, but I remember that something related to email processing was upgraded in that version (maybe courier, maybe exim, etc). It's obvious that something weird was included in one of those upgrades.

I didn't mess with my DNS nor the people at the datacenter, so this is weird. But I've noticed that the headers in outgoing emails are containing the correct SPF and DomainKeys strings, so this alerts in control panels should be a bug from cPanel.

I've learnt to get over this, although it has generated tickets from my customers, worried about the alert. So this issue should be reviewed and/or corrected.

Anybody from cPanel please?
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Hi there. I'm experiencing the same issue as dwinans since some months ago. I cannot recall with what cPanel update started, but I remember that something related to email processing was upgraded in that version (maybe courier, maybe exim, etc). It's obvious that something weird was included in one of those upgrades.

I didn't mess with my DNS nor the people at the datacenter, so this is weird. But I've noticed that the headers in outgoing emails are containing the correct SPF and DomainKeys strings, so this alerts in control panels should be a bug from cPanel.

I've learnt to get over this, although it has generated tickets from my customers, worried about the alert. So this issue should be reviewed and/or corrected.

Anybody from cPanel please?
The discussed warning messages may be triggered by different, unique root causes involving any number of varying circumstances; to properly investigate we will need direct access to the affected systems. Please escalate the issue by submitting a support request so that we may thoroughly inspect the server configuration and verify the behavior being experienced in your server environment. To help expedite the issue please mention case 4891 and provide a link to this forums thread within your ticket submission.

When available, please send me a private message (PM) or reply in this thread including your new ticket ID number so that we may follow-up internally.