Using 127.0.0.1 in your resolv.conf?

If you have recently upgraded cPanel you may be seeing this:

Security Warning, your resolver configuration contains 127.0.0.1 (localhost). For security reasons, we recommend that you use a non-local dns resolver. Click here to change your configuration.

So what’s this all about? Your server has been running very happily for months – why are you suddenly seeing this? cPanel have realised that too many people are doing this and that it could have serious security implications!

People can add almost any domains they wish to your server, and if you use 127.0.0.1, your server thinks the domain is local – imagine if I setup hotmail.com on your server as a reseller – I would receive every single email destined for hotmail!! Not a pretty idea is it??

TweakGeek are compiling a list of nameservers you can replace it with here. Here is the current list as of the 16th of November – check there for further updates:

EV1servers.net (Houston, TX):
ns1.ev1servers.net (207.218.245.135)
ns2.ev1servers.net (207.218.247.135)
ns3.ev1servers.net (66.98.240.150)
ns4.ev1servers.net (67.15.31.150)

ThePlanet (Dallas, TX):
ns1.theplanet.com (216.234.234.30)
ns2.theplanet.com (12.96.160.115)

ServerMatrix (Dallas, TX)
ns1.servermatrix.com (216.185.111.10)
ns2.servermatrix.com (69.56.222.10)

Mzima (Los Angeles, CA):
ns1.lax01.mzima.net (64.235.224.4)
ns2.lax01.mzima.net (64.235.225.10)

FortressITX (Clifton, NJ):
ns1.pwebtech.com (69.72.145.101)
ns2.pwebtech.com (69.72.145.102)

ServInt (Ashburn, VA):
ns.servint.net (209.50.225.13)
ns2.servint.net (209.50.225.12)

Earthlink (Various):
ns1.mindspring.com (207.69.188.185)
ns2.mindspring.com (207.69.188.186)

Burst/nocster (Scranton, PA) :
ns1.burst.net (66.96.193.2)
ns2.burst.net (66.96.194.2)