Vimzaa Knowledgebase
  • Getting Started
  • Virtual Private Servers
    • What is Virtual Private Server
    • Getting Started With Linux
      • An Introduction to the Linux Terminal
      • Basic Linux Navigation and File Management
      • An Introduction to Linux Permissions
      • An Introduction to Linux I/O Redirection
      • Linux Permissions Basics and How to Use Umask on a VPS
    • Connect with SSH
      • How to Add SSH Keys to VPS
      • SSH Essentials: Working with SSH Servers, Clients, and Keys
    • How To Edit the Sudoers File on Ubuntu and CentOS
    • Introduction to Nginx and LEMP on Ubuntu
      • Initial Server Setup with Ubuntu
      • Installing LEMP Stack on Ubuntu 14.04
      • Installing LEMP Stack on Ubuntu 16.04
    • Anti-Spam Best Practices
  • cPanel Hosting
    • Cloudflare
    • cPanel - Advanced
      • How to add and manage cron jobs / scheduled tasks in cPanel
      • How to track DNS using cPanel
      • How to create custom ‘error pages’ in cPanel
      • How to flush your local machines DNS Cache
      • How to use the Google Public DNS for faster DNS lookups
      • How to check if your domain has ‘propagated’ following DNS changes
      • Install Wildcard SSL Certificates using LetsEncrypt with cPanel
      • Correct SPF Records
      • Check processes or users with high iowait (99.99%) from Cloudlinux Logs
      • How to tune MySQL on a cPanel server with MySQLTuner
      • Clear disk space on cPanel Server by removing backups, trash etc
      • Add monitoring script to server for monitoring top, iostat etc
      • Testing your site before ‘go-live’ by editing your hosts file
    • cPanel - Domains
      • How to use the Site Publisher in cPanel
      • Managing addon domains in cPanel
      • What is the difference between addon domains and ‘alias’ domains?
      • Managing subdomains in cPanel
      • Managing domain aliases in cPanel
      • Managing domain redirects using cPanel
      • How to use the Simple Zone Editor in cPanel for managing your DNS Records
      • How to use the Zone Editor within cPanel to manage your DNS records
      • How to redirect all domain ‘alias’ to the main domain using cPanel
      • How to enable Cloudflare on your cPanel account
      • How to check what nameservers a domain is using
      • How to create Custom Nameservers / Vanity Nameservers
      • How do I transfer a domain name to Vimzaa?
    • cPanel - Managing Databases
      • Managing a MySQL Database in cPanel with phpMyAdmin
      • Manage MySQL Database in cPanel
      • Simplified database creation with the cPanel MySQL Wizard
      • Managing MySQL databases remotely using ‘Remote MySQL’ in cPanel
    • cPanel - Managing Email Accounts
      • Managing email accounts with cPanel
      • How to create and manage email forwarders using cPanel
      • Managing email routing with cPanel
      • Change Your E-Mail Account Password
      • Improving mail deliverability (SPF & DKIM)
    • cPanel - Managing Files
    • cPanel - Metrics
    • cPanel - Software and Applications
    • cPanel - Security
    • SiteBuilder Pro
    • Enable or disable PHP modules
    • How can I migrate my cPanels to Vimzaa Website Hosting?
    • SSH Access to cPanel Servers
    • How do I add another domain to my Hosting Account?
    • How do I access WHM (Web Host Manager)?
  • Plesk Hosting
    • An Introduction to Plesk
    • Getting Started with Plesk
      • How to login to Plesk for the first time
      • The Plesk User Interface Explained
      • Understanding Subscriptions in Plesk
      • How to upload content with Plesk
      • How to manage mailboxes / mail accounts with Plesk
      • Managing Web ApplicationsManaging Web Applications
    • Plesk Tutorials
      • A basic getting started guide to creating your first site with Plesk
      • How to manage DNS and nameservers using Plesk
    • Plesk Funtionality - Explained
      • Managing your User Account in Plesk
      • Managing your Web Hosting with Plesk
  • Game Servers
    • Setup Teamspeak 3 Server on Linux
    • Installing SteamCMD for Steam Game Servers
  • SSL Certificates
  • Domains
    • Can I register or transfer my domain to Vimzaa
    • Can I buy a domain name together with a web hosting plan
    • Default nameservers for shared webhosting
Powered by GitBook
On this page
  1. cPanel Hosting
  2. cPanel - Managing Email Accounts

Improving mail deliverability (SPF & DKIM)

PreviousChange Your E-Mail Account PasswordNextcPanel - Managing Files

Last updated 5 years ago

cPanel >> Email - Authentication The following video guide walks you through improving email deliverability from your Smart account. It includes using to check SPF and DKIM records and how to set them correctly in your cPanel/DNS.

cPanel Email Deliverability Tool – SPF and DKIM Records

As you may know, if mail service is unauthenticated you can face the following issues:

  • emails you send are delivered to Spam/Junk folders

  • emails you send bounce with "SPF record failure" error

  • your Inbox gets numerous "Failed delivery" bounce backs of the emails you never sent

In the first case, recipient mail server looks up SPF record for your domain, and if it is not added / does not match actual outgoing server IP address, such a mail delivery will fail. Such checking mechanism is implemented in order to make sure email comes from a legitimate sender and verified sender. Second situation takes place when there is no SPF/DKIM configured for your domain or they are configured incorrectly, which lets unauthorized party to forge emails using @yourdomain.com mailbox. Such cases are called mail spoofing. Email Deliverability is an effective set of anti-spoofing and anti-spamming tools available in cPanel. The Email Deliverability table displays your cPanel account's domains and allows you to address any existing problems with your mail-related DNS records – SPF and DKIM.

  • SPF record

Nowadays the vast majority of spam emails have fake data in the «From» field. Spammers and fraudsters use special tools to send their mail on behalf of a real owner of the e-mail address. SPF record (acronym for Sender Policy Framework) is an effective and simple method which lets you avoid such issues. If your domain name has the correct SPF record, then you can be sure nobody is able to send fake e-mails on behalf of your domain name. The main idea of SPF record is that an owner of domain name publishes the information about IP addresses that are authorized to send mail from this domain name. The receiving server compares the information in the envelope sender address with the information published by domain name owner. If these details match then e-mail is delivered. NOTES:

  • SPF is not added to the domain DNS zone automatically. Thus, it is required to configure the proper record from the Email Deliverability menu.

  • SPF record is added to your domain DNS zone as TXT record. There are cases when you need to add another TXT record to verify your domain name ownership for some service. It is not recommended to modify existing SPF record, it is better to add a new one instead.

  • DKIM Record

DKIM (DomainKeys Identified Mail) is another way of e-mail authentication. This method uses information about domain which is published by the domain owner. That information allows receiving server to verify if the e-mail message was sent by legal owner of that domain name. Once TXT record which contains DKIM has been added to DNS zone, a special code is added to the headers of outgoing e-mails. Receiving servers compare these headers with the information in DNS zone and if it matches then the e-mail is delivered. NOTE: DomainKeys(DK) and DomainKeys Identified Mail (DKIM) are separate things. DomainKeys(DK) are not available on our shared servers as DK implementation was converted to DKIM and extended in a number of ways as of cPanel 11.32 and later releases. Some of the differences between DomainKeys and DKIM include:

  • multiple signature algorithms (as opposed to just one available with DomainKeys)

  • more options with regard to canonicalization, that validates both header and body

  • the ability to delegate signing to third parties

  • the ability for DKIM to self-sign the DKIM-Signature header field – to protect against its being modified

  • the ability for wildcard option on some parameters

  • This option is unavailable if the system does not control the domain's DNS records. Thus, you will be able to use the Repair option only in case your domain name is pointed to our Shared hosting nameservers.

  • You cannot simultaneously update two or more domains whose records exist on the same zone. The bulk records update is possible only in case domains' records exist on separate zones.

  • Reloading the interface does not interrupt the repair process.

Sometimes cPanel automatically fetches incorrect server outgoing IP address. This happens when we have to change outgoing mail IP due to poor mail reputation or blacklists. Get in touch with us via or and we will gladly re-check if the correct IP is added to your SPF record.

SPF record has its own specific syntax. It is strongly recommended to get familiar with if you are going to customize the record manually.

the ability to support

If having DomainKeys for you is a must, we suggest upgrading to VPS/Dedicated server where you will be able to setup this feature. These simple actions will let you be sure that no one is able to send spam on your behalf and your e-mail will not be delivered to spam folders. In order to configure the SPF and DKIM records, follow the instructions below: Log into cPanel > Email section > Email Deliverability menu. For cPanel Basic Theme: For cPanel Retro theme: This section allows you to perform the following actions: 1. Repair — this feature allows the system to repair a domain's invalid records: NOTES:

In the window that appears upon clicking Repair, you can review and confirm the system's recommendations for any invalid records. You can also Copy or Customize a suggested record before you approve the system's repairs. Click on Repair and the records will be added to the DNS zone of the domain/subdomain automatically. This process can take up to five minutes, depending on the server. When the records are set up, you will receive a corresponding success message. Allow some time to pass for the records to propagate and refresh the page afterwards. The Email Deliverability Status will be then changed to Valid: 2. Manage - this option allows you to manually configure a domain's mail-related DNS records. The Manage the Domain section already displays the properly-configured DKIM and SPF record values. So in most cases, you just need to Copy them and paste manually to the DNS zone of your domain. Alternatively, you can click Install the suggested record to have the SPF and DKIM records added to the DNS zone automatically: NOTE: The Install the suggested record option is available only in case your domain name is pointed to our Shared hosting nameservers. After the record is installed, you will receive the confirmation message: In the SPF section, you will also have an option to Customize the system's recommended SPF record for a domain. The interface displays the domain's current SPF name and value in the Current "SPF" (TXT) Record section, if one exists, and the system's recommendations in the Suggested "SPF" (TXT) Record section: You can configure the following settings: 1. Domain Settings - this section allows you to define the hosts or MX servers allowed to send mail from your domain: 2. IP Address Settings - this section allows you to add additional IP Address blocks to your SPF record. The system automatically includes your server's main IPv4 or IPv6 addresses in these lists: 3. Additional Settings - this section allows you to modify additional SPF record settings.4. Preview of the Updated Record- this section displays what the updated SPF record will look like, based on its current modifications. Click the Install a Customized SPF Record tab to install the new record: That's it! Source: namecheap.com

Live Chat
Ticket
SPF record syntax documentation
signature timeouts in DNS
mail-tester.com
Improving Mail Deliverability (SPF & DKIM)