How are you dealing with remote domains and cloudflare

bellwood

Well-Known Member
PartnerNOC
Sep 25, 2012
86
41
143
New York
cPanel Access Level
DataCenter Provider
Just wanted to ask the community how they are enforcing "Allow Remote Domains" being turned off while still permitting domains using remote nameservers to be added?

In my case, domains being added have an A and AAAA that resolve to addresses on my server, however, unless I add seemingly endless list of Cloudflare IPs (and others) to /etc/ips.remotedns users cannot add domains that aren't using my nameservers.

Administratively this seems crazy as there are endless remote nameservers and resolving addresses. Is there no way to permit domains that RESOLVE to the server to be added?
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,499
1,971
363
cPanel Access Level
Root Administrator
Hey there! That seems like the right method, actually - adding all the IP addresses for all the remote nameservers that you plan to support. For a shared server, many hosts just force the user to use a certain nameserver, restricting how many IPs need to be added. If you allow users to choose their own nameserver, that will definitely make administration of this option more complicated.

For dedicated and VPS machines, I just turn this option off since I figure those users should know what they are doing.
 

bellwood

Well-Known Member
PartnerNOC
Sep 25, 2012
86
41
143
New York
cPanel Access Level
DataCenter Provider
I suppose, but, it seems like, if the owner of a domain has gone out of their way to point it to my server, the server should acknowledge and accept it. Current methodology means I have to either:

a) force a customer to use my nameservers (cPanel) which either isn't an option for many (policy, lack of record support, etc)
b) have a manual interaction based on client frustration via my helpdesk to then have to add ips

Neither are good options.

It would be wonderful if the dev/product team would *consider* a tweak setting permitting domains that point to the server. Get Jesse on it, I know he's itching to write some feature code =)
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,499
1,971
363
cPanel Access Level
Root Administrator
I think Jesse is actually out today :D Not that I approved a day off for him............................

Could you use the link in my signature to make a feature request and then I'll bring it up during next week's meeting?