Email Deliverability "SPF is not properly configured for this domain." not reading into Included Files

[thowden]

Hi All

To clarify the title:
Email Deliverability: In a CPanel account, not the WHM console for the server.
Error Message is displayed (sometimes): "SPF is not properly configured for this domain."
Cause: This feature is not reading the Included Files.

Server is CPanel 94.08 which sync's with a cluster of CPanel DNSOnly servers for external resolution.

SPF record for the domain exists:
v=spf1 +a include:spf.protection.outlook.com include:spf.example-domain.com -all

while CPanel is recommending to specifically include the local IP (e.g. 123.456.123.456) - 'Must include' - implying it is broken and will not work without this.
Recommended record example:
v=spf1 +a +ip4:123.456.123.456 +include:spf.protection.outlook.com +include:spf.example-domain.com -all

Main issue: The 'included' file "spf.example-domain.com" already has the requested local IP address in it and the inclusion of this new record is redundant.
Testing via multiple sources confirms that it will and does work.

So why does CPanel not fully validate the existing SPF record ? It appears that Cpanel Email Deliverability test is not recursing into the include file(s).

Side issue:
Using the + sign with the include: statement is redundant as include means 'pass' sources within the file.

Is anyone else seeing this issue ?

Thanks
Tony

 

[cPRex]

Hey there! I can't say I've seen other reports like this. It might be best to open a ticket with our team so we can check your specific configuration.