User able to addon domains that do not point to the server.

[jols]

We are currently running:
cPanel 11.24.5-R38506 - WHM 11.24.2 - X 3.9
REDHAT Enterprise 5.3 i686 standard on quasar

I just discovered that there is a user on one of our servers that is able to add domains that do not direct traffic to the server, and yes, the following is NOT selected in WHM:

Allow Creation of Parked/Addon Domains that resolve to other servers (i.e. domain transfers) [This can be a major security problem. If you must have it enabled, be sure to not allow users to park common internet domains.]

How can this situation be corrected?

[cpanelkenneth]

Is this tweak setting enabled:

Allow Creation of Parked/Addon Domains that are not registered

[jols]

Is this tweak setting enabled:

Allow Creation of Parked/Addon Domains that are not registered

No it's not. This was the first thing I checked.

[thewebhosting]

Hi,

If this tweak settings is disabled then it can not be possible to host the domain as add-on/parked which is not pointing to the server. However, you can check with trick:

Enable that option host a add-on/parked a domain which is not pointing to the server and after that disable that tweak settings option. If this can work then it should be the case.