cPanel & WHM Version 94 has been released, and brings a slew of great updates. Take a look at what is included, and then upgrade today!

Support for IPv6 on SPF and account migrations

Silent Ninja shared this idea 6 years ago
Open Discussion

Currently cPanel doesn't handle IPv6 addresses on SPF, so...


- If you migrate an account with SPF enabled to a server with IPv6: Google, Microsoft and Yahoo will get your e-mails thru IPv6 and thus SPF will fail or soft-fail (-all vs ~all).

- If you migrate an account with SPF enabled with +ip6 added manually, the IPv6 address won't be rewritten and thus e-mails will fail.

- If your server have an IPv6 address and you (or your customer) enable SPF that IPv6 address won't be added to your TXT entry at the DNS. It also can't be added because there's no input for it, you have to manually edit the DNS zone to add it.


Workarounds for now


-Setup an IPv6 MX so that the +mx automatically includes that IP address on all SPFs, this will also allow that all e-mail coming from Gmail / Microsoft / Yahoo, can reach your servers thru IPv6. You'll have to manually edit it when migrating.


-Setup the +ip6 address on the SPF so that the SPF validates when sending e-mail thru it. You'll also have to manually edit it when migrating.


-Disable IPv6 on the server.

Comments (4)

photo
1

Right now we only support IPv6 for serving website content via Apache. We are working on adding support for Email services with IPv6, which would include SPF.

photo
1

Kenneth Power wrote:

Right now we only support IPv6 for serving website content via Apache. We are working on adding support for Email services with IPv6, which would include SPF.
I understand that, but since IPv6 support is disabled on SPF, you should also setup Exim so it doesn't send e-mails thru the IPv6 interface, otherwise we won't be able to enable SPF on the server since the e-mails will be taken as spam.

photo
1

Either enable IPV6 for SPF or allow us to create a custom DNS template for SPF so we can do this ourselves. With customers having more trouble to mail to gmail and outlook.com the SPF record makes a big difference in that.

photo
1

It is indeed ridiculous that the ipv6 of the server is not added to the spf record by default :|

Leave a Comment
 
Attach a file