The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SPF help please

Discussion in 'E-mail Discussions' started by booher, Jun 16, 2012.

  1. booher

    booher Registered

    Joined:
    Jul 9, 2008
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Hello everyone,

    E-Mails coming from my server have been going to the spam box on many e-mail providers, so i decided to look into how to fix this. Turns out my SPF wasn't enabled, so i go through and enable it, and when i went to test it a couple hours later using Port25's authentication verifier, and it still says the SPF failed. What am i doing wrong? It is really starting to bother me, lol.

    Code:
    ...
    
    ==========================================================
    Summary of Results
    ==========================================================
    SPF check:          fail
    DomainKeys check:   neutral
    DKIM check:         pass
    Sender-ID check:    fail
    SpamAssassin check: ham
    
    ... 
     
    #1 booher, Jun 16, 2012
    Last edited by a moderator: Jun 16, 2012
  2. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,279
    Likes Received:
    36
    Trophy Points:
    48
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    Do a simple check [using a remote resolver] to see if the authoritative nameservers are serving up any SPF record at all.

    If your domain is "example.com" then, from commandline, do something like:

    dig example.com txt @name_of_authoritative_nameserver

    It should yield something like:

    ;; QUESTION SECTION:
    ;example.com. IN TXT

    ;; ANSWER SECTION:
    example.com. 14400 IN TXT "v=spf1 a mx ip4:x.x.x.x a:server.blah.com ip4:y.y.y.y ?all"

    If you do see what appears to be a valid SPF entry [TXT record] when querying the authoritative nameserver, then try doing the same via a public resolver.

    dig example.com txt @resolver.qwest.net (a popular public resolver)
    dig example.com txt @8.8.4.4 (a Google resolver)
    dig example.com txt @8.8.8.8 (a Google resolver)

    You should see similar results.

    If those tests indicate that an SPF record is indeed in place, then perhaps the local resolver that you're using is just delivering stale DNS info.

    If you don't see a TXT record when you query the authoritative nameservers, then that would be a problem. You might have an error in the syntax of your SPF data in the TXT record causing it to not be added to the DNS zone.

    It's hard to help you diagnose without more information, but you don't want to put your information out for public display.

    You don't know me, and thus you can't trust me from adam. But feel free to PM me the name of the domain you're attempting to set up SPF for and I'll attempt to help you troubleshoot.

    Mike
     
  3. booher

    booher Registered

    Joined:
    Jul 9, 2008
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    The SPF is working fine now, guess it needed a couple more hours to resolve? Still having problems with the DomainKeys check, it's at neutral with the same output as above.

    Edit: nevermind, appears whoever approved my post removed the rest of the email, which did have some debug stuff in it, oh well.

    DomainKeys result: neutral

    any ideas?
     
    #3 booher, Jun 16, 2012
    Last edited: Jun 16, 2012
  4. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,279
    Likes Received:
    36
    Trophy Points:
    48
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    DomainKeys was dropped in favor of DKIM. So you shouldn't expect to see a "pass" for the DomainKeys check.

    Mike
     
  5. booher

    booher Registered

    Joined:
    Jul 9, 2008
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Ah, i didn't know that. Thanks.

    It appears e-mails are still sending to spam on GMail. My server isn't on any blacklists, any suggestions?
     
Loading...

Share This Page