Topics

1

DNS / Postmark DKIM selector changes when SOA serial updates

« on: March 18, 2024, 11:09:18 PM »

I'm new to CWP and have migrated 13 of 50+ sites from cPanel/WHM so far and am seeing an issue on each of the sites. I'm using Postmark which involves adding a unique DKIM to each site's zone file. The DKIM selector is created by Postmark so I have no control over it. When I update the SOA record and its serial number increments, it also changes the Postmark DKIM serial. For example

- Original Postmark selector: 20240216030441pm._domainkey
- Original SOA serial: 2024031800
- Updated SOA serial: 2024031801
- Postmark selector after SOA update: 20240318010441pm._domainkey

So the first 10 digits of the PM selector change to match the new SOA serial, which breaks the PM service.

I'm seeing this on all of the new accounts and regardless of how different the selector and serial are from each other. The first 10 digits of the selector always change to match the serial. There should be no correspondence between the two numbers but I have a feeling that since they use a similar format, the code or configuration in CWP used to increment the serial is also applying to the PM selector.

It doesn't seem to matter whether I use DNS Functions > Edit Record or DNS Functions > Edit File. If I update the SOA, the PM selector will change as well. The only way around it is to edit all records manually using Edit File, including the SOA serial, but that only seems to work temporarily.

Thanks in advance for any help getting around this.