Problems Exist (DKIM)

[MustaphaG]

Hello there,
1. i'm having this problem" Problems exist (dkim)" when i go to "Email Deliverability" is it possible to know what should i do to solve this ?
2. sometimes i get this error when someone send to gmail account:
SMTP error from remote mail server after end of data: 451-4.7.24 [x.x.x.x15] The SPF record of the sending domain has one\n451-4.7.24 or more suspicious entries. To protect our users from spam, mail\n451-4.7.24 sent from your IP address has been temporarily rate limited. Please\n451-4.7.24 visit\n451-4.7.24 Prevent mail to Gmail users from being blocked or sent to spam - Gmail Help for more\n451 4.7.24 information. o126si1392346pga.273 - gsmtp

thank you in advance

 

[cPAdminsMichael]

Seems as you have wrong SPF/DKIM DNS entries for your domain - or maybe your IP are on some of the blacklists, but would really need more info to give an exact diagnose.
If you don't want to share your domain name on the forum, you are welcome to send me a PM or visit our website and use the live chat (I'm online), and I'm more than happy to give a quick look ;-)

 

[MustaphaG]

Seems as you have wrong SPF/DKIM DNS entries for your domain - or maybe your IP are on some of the blacklists, but would really need more info to give an exact diagnose.
If you don't want to share your domain name on the forum, you are welcome to send me a PM or visit our website and use the live chat (I'm online), and I'm more than happy to give a quick look ;-)

thank you for the reply, in the domain zone of the provider interface i did put as entry

	Domaine	TTL	Type	Cible
	mydomain.com.	0	NS	dns102.ovh.net.
	mydomain.com.	0	NS	ns102.ovh.net.
	mydomain.com.	0	MX	0 mail
	mydomain.com.	0	A	x.x.x.84
	mail.mydomain.com.	0	A	x.x.x.84

mydomain.com.

600

TXT

"v=spf1 +all"

please let me know if you need any other information, i really want to solve the both issues. thank you

 

[cPAdminsMichael]

Ok, that SPF record is a bit off in my opinion as it completely eliminates the reason for having a SPF at all..
Depending on how/from where you send out mails, you may want to change it to:
"v=spf1 +a +mx -all"

 

[MustaphaG]

Ok, that SPF record is a bit off in my opinion as it completely eliminates the reason for having a SPF at all..
Depending on how/from where you send out mails, you may want to change it to:
"v=spf1 +a +mx -all"

thank you for your reply, so if i change the SPF entry, which problem will solve i mean the (DKIM issue) or (gamil issue).

 

[cPAdminsMichael]

It will correct your SPF at least. According to your DNS list, you don't have any DKIM records - which is not mandatory - so at least your mail should be working after the corrected SPF record.

The easiest is actually if you go to WHM -> Email -> Email Deliverability. This tool will tell you exactly how the different SPF/DKIM, etc. records should look like.

 

[MustaphaG]

It will correct your SPF at least. According to your DNS list, you don't have any DKIM records - which is not mandatory - so at least your mail should be working after the corrected SPF record.

The easiest is actually if you go to WHM -> Email -> Email Deliverability. This tool will tell you exactly how the different SPF/DKIM, etc. records should look like.

Thank you for the reply, yes i followed that tool, and i did add a TXT entry as it says. now i'm waiting for the result. i think it will take sometime to make the change, i will update you the new statuts. thank you

 

[MustaphaG]

hello again,
well i did add the new TXT record suggeted by the tool in email deliverability. then i did press the button 'install the suggestion' i got this message:
Warning: Because this is not an authoritative nameserver for the domain “mydomain.com”, the current or suggested records will not reflect your changes. Use the Zone Editor to ensure that the system applied your changes.
is this normal?

 

[SamuelM]

Hello @MustaphaG

The "this is not an authoritative nameserver for the domain" warning indicates that your domain uses name servers that are not managed by your cPanel server. This means that your domain's DNS settings are managed somewhere else, perhaps at the domain registrar.

If you would like to create name servers that resolve to your cPanel server, which would allow you to manage all DNS changes via cPanel and WHM, please refer to our documentation on the following page:

https://docs.cpanel.net/knowledge-base/dns/how-to-set-up-nameservers-in-a-cpanel-environment/

This page covers how to create custom name servers at many of the most common domain registrars.

Please feel free to let us know if you have any additional questions.