Emails forwarded by cPanel end up in SPAM folder

[FL_HOA_Webmaster]

I see this in email headers forwarded to my personal email by Cpanel:

Authentication-Results: mailin037.protonmail.ch; dmarc=none (p=none dis=none)
header.from=mydomain.com
Authentication-Results: mailin037.protonmail.ch; spf=fail
smtp.mailfrom=mydomain.com
Authentication-Results: mailin037.protonmail.ch; arc=none smtp.remote-ip=184.168.200.xxx
Authentication-Results: mailin037.protonmail.ch; dkim=none

According to what-is-arc-or-authenticated-received-chain?, ARC is used by forwarders to avoid invalidating the DKIM and SPF authentications in the original email headers.

I suspect adding ARC support to Cpanel would resolve this issue. Is there any chance that is in the development roadmap?

 

[cPanelWilliam]

Hello! As far as I know, we don't have plans to implement ARC support. However, we do have a feature request currently open on this topic:

https://features.cpanel.net/topic/authenticated-received-chain

Based on the email headers you provided, I would suspect that the DKIM not being signed and the SPF failure would significantly impact the email being categorized as spam. I would recommend correcting the SPF and DKIM failures as that would increase the chances of the email being accepted to the inbox. The Email Deliverability interface in cPanel should get you pointed in the right direction in regards to correcting the SPF and DKIM failures.

 

[FL_HOA_Webmaster]

Hello! As far as I know, we don't have plans to implement ARC support. However, we do have a feature request currently open on this topic:

https://features.cpanel.net/topic/authenticated-received-chain

Based on the email headers you provided, I would suspect that the DKIM not being signed and the SPF failure would significantly impact the email being categorized as spam. I would recommend correcting the SPF and DKIM failures as that would increase the chances of the email being accepted to the inbox. The Email Deliverability interface in cPanel should get you pointed in the right direction in regards to correcting the SPF and DKIM failures.

My website uses Brevo (formerly SendInBlue) to send SMTP emails, and my DKIM and SPF DNS setups are fine when I send through their service. But when cPanel forwards emails, DKIM and SPF checks fail.

That's because DKIM and SPF checks are based on the email's actual origin; forwarding without ARC invalidates them, because they appear to come from a source other than the one that sent them.

ARC is designed to correct this precise problem, but cPanel doesn't support it.

I hope this clarifies the problem.

 

[cPanelWilliam]

Hello, in this situation, I would suggest enabling SRS support to see if it allows the forwarded email to pass spam checks:

https://support.cpanel.net/hc/en-us/articles/1500005126622