The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Cpanel SPF Generator - Input Validation?

Discussion in 'General Discussion' started by n8whnp, Oct 7, 2009.

  1. n8whnp

    n8whnp Member
    Staff Member

    Joined:
    Sep 2, 2007
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    51
    Does the cpanel SPF generator preform any kind of input validation? I am seeing instances where infinite recursion loops are being preformed in a spf record:

    i.e.

    domain1.com. 14400 IN TXT "v=spf1 a mx include:domain2.com ~all"

    and

    domain2.com. 14400 IN TXT "v=spf1 a mx include:domain1.com ~all"

    This causes you to hit the 10 check_host() limit as described in RFC 4408 (Section 10.1.) which means you allow customers to create records which will get their mail flagged as spam for failing to have working SPF records.

    If you want to make this happen, just put multiple domains in the include list from the same cpanel account and select: Overwrite Existing Entries.
     
    #1 n8whnp, Oct 7, 2009
  2. Owen.formerlyof

    Owen.formerlyof Registered

    Joined:
    Oct 8, 2009
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    51
    I have a couple of questions that could help me track this issue down.

    1) How did the ~ flag get set on all?
    2) Is one or more of these domains an addon domain?
    3) Are the entries in the same zone on different zones?
     
    #2 Owen.formerlyof, Oct 9, 2009
(You must log in or sign up to post here.)
Loading...
Similar Threads - Cpanel Generator Input
  1. Valetia

    Is sprite_generator broken in cPanel 11.52?

    Valetia, Oct 14, 2015, in forum: User Experience
    Replies:
    7
    Views:
    969
    cPanelMichael
    Nov 17, 2015
  2. cag8f

    Bulk password generator that can meet cpanel strength requirements?

    cag8f, Sep 8, 2015, in forum: Security
    Replies:
    2
    Views:
    424
    cPanelMichael
    Sep 9, 2015
  3. Leslie de Groot

    In Progress Account suspension is broken in cPanel 66

    Leslie de Groot, Jul 27, 2017 at 9:19 AM, in forum: General Discussion
    Replies:
    2
    Views:
    46
    cPanelMichael
    Jul 27, 2017 at 10:08 AM
  4. Robert B .

    Unable to access cPanel

    Robert B ., Jul 27, 2017 at 3:15 AM, in forum: General Discussion
    Replies:
    2
    Views:
    23
    cPanelMichael
    Jul 27, 2017 at 8:28 AM
  5. oneway

    CalDAV and CarDAV does not connect to cPanel/Horde

    oneway, Jul 27, 2017 at 2:24 AM, in forum: E-mail Discussions
    Replies:
    2
    Views:
    29
    oneway
    Jul 27, 2017 at 12:48 PM

Share This Page