Subdomain stealing problem

Discussion in 'Installation/Configuration' started by vps4youhu, Feb 15, 2023.

  1. vps4youhu

    vps4youhu New Member

    Hello,
    I have the following problem:
    Customer A create a website with example.com.
    Then customer B can create a website with a subdomain of another customer's domain, like sub.example.com. Is there a way to block this?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Enable the domain limit module under System > Interface > main config > domains
     
  3. vps4youhu

    vps4youhu New Member

    This isn't exactly the function that i was looking for.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    I thought you wanted to prevent that customers can add subdomains or domains owned by other customers? If yes, then that's the function to prevent this.
     
    ahrasis likes this.
  5. vps4youhu

    vps4youhu New Member

    Yes, this is preventing it, but actually blocking them to add any domain or subdomain.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    They can still add subdomains to existing websites and vhost subdomains themself. And, of course, you must block them from adding domains if you give them access to the panel. Otherwise, they could e.g. do things like adding gmail.com as an email domain in the mail module and fetch all outgoing emails to Gmail from other users, just to give an example. So anyone who provides hosting to third parties and gives them access to the panel and allows them to add websites, email domains, or DNS records must enable the domain module anyway.
     
    ahrasis likes this.
  7. vps4youhu

    vps4youhu New Member

    Thank you very much, you are completely right about this.
     

Share This Page