Email deliverability issues in WHM occur when your server's mail-related DNS records are not properly configured, preventing other mail servers from trusting your emails. The Email Deliverability interface in WHM helps you identify and fix problems with DKIM and SPF records to ensure your emails reach their intended recipients without being marked as spam.
This guide walks you through using WHM's Email Deliverability tool to diagnose and resolve common email authentication problems that affect delivery rates.
What is Email Deliverability in WHM?
The Email Deliverability interface is a WHM tool that scans your server's mail-related DNS records to identify configuration issues. Mail servers use these authentication records to verify that your server is trustworthy and authorized to send emails on behalf of your domains.
Two critical authentication methods are checked:
- DKIM (DomainKeys Identified Mail): Verifies the sender and ensures messages haven't been altered during transit
- SPF (Sender Policy Framework): Confirms your server is authorized to send emails for your domain
Both authentication methods require properly configured DNS records. If you manage your own DNS through OBHost, the system can automatically modify these records when needed.
Accessing the Email Deliverability Interface
To check your email deliverability status:
- Log into WHM as the root user
- Navigate to Home > Email > Email Deliverability
- Select the domain you want to check from the list
- Review the status indicators for each authentication method
The interface displays your server's hostname and current HELO configuration. If the HELO configuration doesn't match your domain name, you'll see a notification alerting you to this mismatch.
Understanding DKIM Records
DKIM adds a digital signature to your outgoing emails, allowing receiving servers to verify the message came from your domain and wasn't modified during delivery. This authentication method significantly improves deliverability rates.
How DKIM Works
When you send an email, your server signs it with a private key. The receiving server checks this signature against a public key published in your DNS records. If the signatures match, the email passes DKIM authentication.
Fixing DKIM Issues
If WHM detects DKIM problems, it displays suggested records in the interface. You have several options:
- Generate Local DKIM Key: Create a new DKIM record if one doesn't exist
- Copy Records: Copy the suggested Name and Value to manually add to your DNS
- View Full or Split: Choose how to display the record (full for systems that auto-split, or in 255-character parts for manual entry)
- View Private Key: Access the private key if needed for troubleshooting
If your server is authoritative for the domain's DNS, WHM can automatically apply the correct DKIM records. Otherwise, you'll need to manually add these records through your DNS provider.
Understanding SPF Records
SPF records specify which mail servers are authorized to send emails on behalf of your domain. Without a proper SPF record, receiving servers may reject your emails or mark them as spam.
Creating or Updating SPF Records
The Email Deliverability tool will show you the correct SPF record format for your server. A basic SPF record includes:
- Your server's IP address or hostname
- Any third-party services authorized to send mail for your domain
- A policy for handling unauthorized senders
If you use external email services alongside your server, make sure to include them in your SPF record to avoid authentication failures.
Common Email Deliverability Problems
Missing DNS Records
The most common issue is missing DKIM or SPF records entirely. If your domain lacks these authentication records, many mail servers will automatically flag your emails as suspicious.
Mismatched HELO Configuration
If your server's HELO greeting doesn't match your domain name, some mail servers will reject your emails. The Email Deliverability interface alerts you to this mismatch and shows the current configuration.
Non-Authoritative DNS
If your server isn't authoritative for your domain's DNS records, you'll need to manually add the suggested records at your DNS provider. Contact your DNS hosting provider if you're unsure where your DNS is managed.
Incorrect Record Values
Even small typos in DKIM or SPF records can cause authentication failures. Always copy the suggested values exactly as shown in the WHM interface.
Best Practices for Email Deliverability
To maintain high deliverability rates:
- Regularly check the Email Deliverability interface for warnings or errors
- Enable both DKIM and SPF authentication on all domains
- Keep your server's hostname configured correctly and matching your DNS
- Monitor your mail logs for authentication failures
- Update SPF records when adding new mail-sending services
- Use valid, working DNS nameservers for all domains
Frequently Asked Questions
Why are my emails going to spam even with DKIM and SPF configured?
While DKIM and SPF are essential for email deliverability, other factors affect spam filtering including email content, sender reputation, recipient engagement, and complaint rates. Check your server's IP reputation and ensure you're following email best practices. Consider implementing DMARC policies to further authenticate your emails.
Can I use the Email Deliverability tool if I don't manage my own DNS?
Yes, the Email Deliverability interface works regardless of where your DNS is hosted. If your server isn't authoritative for your domain's DNS, the tool will provide the correct record values to manually add through your DNS provider's control panel.
How long does it take for DNS changes to affect email deliverability?
DNS changes typically propagate within a few hours but can take up to 48 hours to fully spread across the internet. You can use DNS lookup tools to verify that your new records are visible before testing email delivery to major providers.
Do I need separate DKIM keys for each domain on my server?
Yes, each domain should have its own unique DKIM key pair for proper authentication. The Email Deliverability interface in WHM allows you to generate and manage DKIM keys individually for each domain hosted on your server.
If you need assistance configuring email deliverability or troubleshooting authentication issues, our support team is available 24/7. Visit our contact page or email support@obhost.org for help with your email configuration.
