How are you dealing with remote domains and cloudflare

[bellwood]

Just wanted to ask the community how they are enforcing "Allow Remote Domains" being turned off while still permitting domains using remote nameservers to be added?

In my case, domains being added have an A and AAAA that resolve to addresses on my server, however, unless I add seemingly endless list of Cloudflare IPs (and others) to /etc/ips.remotedns users cannot add domains that aren't using my nameservers.

Administratively this seems crazy as there are endless remote nameservers and resolving addresses. Is there no way to permit domains that RESOLVE to the server to be added?

 

[cPRex]

Hey there! That seems like the right method, actually - adding all the IP addresses for all the remote nameservers that you plan to support. For a shared server, many hosts just force the user to use a certain nameserver, restricting how many IPs need to be added. If you allow users to choose their own nameserver, that will definitely make administration of this option more complicated.

For dedicated and VPS machines, I just turn this option off since I figure those users should know what they are doing.

 

[bellwood]

I suppose, but, it seems like, if the owner of a domain has gone out of their way to point it to my server, the server should acknowledge and accept it. Current methodology means I have to either:

a) force a customer to use my nameservers (cPanel) which either isn't an option for many (policy, lack of record support, etc)
b) have a manual interaction based on client frustration via my helpdesk to then have to add ips

Neither are good options.

It would be wonderful if the dev/product team would *consider* a tweak setting permitting domains that point to the server. Get Jesse on it, I know he's itching to write some feature code =)

 

[cPRex]

I think Jesse is actually out today :D Not that I approved a day off for him............................

Could you use the link in my signature to make a feature request and then I'll bring it up during next week's meeting?

 

[bellwood]

Hah, that man is tenured, battle-tested and field-ready =)

Will check existing features and create one if need be.

Thanks =)

 

[bellwood]

@cPRex check your DM