{"id":6384,"date":"2021-05-22T01:53:30","date_gmt":"2021-05-22T01:53:30","guid":{"rendered":"https:\/\/oxhosting.com\/blog\/2021\/05\/22\/domains-section-of-whms-tweak-settings-hosting\/"},"modified":"2021-05-22T01:53:30","modified_gmt":"2021-05-22T01:53:30","slug":"domains-section-of-whms-tweak-settings-hosting","status":"publish","type":"post","link":"https:\/\/oxhosting.com\/blog\/2021\/05\/22\/domains-section-of-whms-tweak-settings-hosting\/","title":{"rendered":"Domains section of WHM&#8217;s Tweak Settings &#8211; Hosting"},"content":{"rendered":"<p> <script data-ad-client=\"ca-pub-3214842754935876\" async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\n<\/p>\n<div id=\"article\">In this guide, we will look through the <b>Domains <\/b>sections of the WHM&#8217;s <b>Tweak Settings<\/b> menu.<\/p>\n<p><b>Tweak Settings<\/b> allows you to configure many cPanel &amp; WHM settings. The <b>Domains <\/b>section contains a number of options related to creating and maintaining domain names and subdomains on the server.<\/p>\n<p>To get there, log in to your WHM and go to <b>Home &gt;&gt; Server Configuration &gt;&gt; Tweak Settings<\/b>, then navigate to the <b>Domains <\/b>tab.<\/p>\n<p>You can also enter <i><b>Tweak Settings<\/b><\/i> in the search field as shown in this screenshot:<\/p>\n<p><img class=\"kb-image\" src=\"https:\/\/oxhosting.com\/blog\/wp-content\/uploads\/2021\/05\/Domains-section-of-WHMs-Tweak-Settings-Hosting.png\"\/><\/p>\n<p>The <b>Domains <\/b>tab allows the configuration of the following settings:<\/p>\n<p><b>Allow users to park subdomains on the server&#8217;s hostname<\/b><\/p>\n<p>This option allows users to park subdomains on your server&#8217;s main domain name.<\/p>\n<p>For example, if your hostname is <i>server1.nctest.net<\/i> and you want to create the subdomain <i>sub.server1.nctest.net<\/i>, you need this option to be set to <i><b>On<\/b><\/i>, otherwise, you&#8217;ll receive the following error:<\/p>\n<p><img class=\"kb-image\" src=\"https:\/\/oxhosting.com\/blog\/wp-content\/uploads\/2021\/05\/1621648409_663_Domains-section-of-WHMs-Tweak-Settings-Hosting.png\"\/><\/p>\n<p>By default, the value is set to <i><b>Off<\/b><\/i>.<\/p>\n<p><b>Allow cPanel users to create subdomains across accounts<\/b><\/p>\n<p>This option allows cPanel users to create subdomains for domain names that are owned by other users. Such subdomains need to be added as <b>Addon domains<\/b>. With this option disabled, the following error will appear: <\/p>\n<p><img class=\"kb-image\" src=\"https:\/\/oxhosting.com\/blog\/wp-content\/uploads\/2021\/05\/1621648409_606_Domains-section-of-WHMs-Tweak-Settings-Hosting.png\"\/><\/p>\n<p>By default, the value is set to <i><b>Off <\/b><\/i>and we strongly recommend that you keep it this way, otherwise, it may lead to serious security issues.<\/p>\n<p><b>Allow WHM users to create subdomains across accounts<\/b><\/p>\n<p>This option allows WHM users to create subdomains of domain names that are owned by other users. Such subdomains need to be added as <b>Addon domains<\/b>. <\/p>\n<p>By default, the value is set to <i><b>Off <\/b><\/i>and we strongly recommend that you keep this it this way, otherwise, it may lead to serious security issues.<\/p>\n<p><b>Allow remote domains<\/b><\/p>\n<p>This option allows users to add domain names that are pointed to nameservers that do not resolve to your server.<br \/>When this option is set to <i><b>Off<\/b><\/i>, all domain names you add to your cPanel accounts must be pointed to your private nameservers configured on your server. <br \/>By default, the value is set to <i><b>Off <\/b><\/i>and we strongly recommend that you keep this it this way, otherwise, it may lead to serious security issues.<\/p>\n<p>If you try adding a remote domain name with this option set to <i><b>Off<\/b><\/i>, you will receive the following error:<\/p>\n<p><img class=\"kb-image\" src=\"https:\/\/oxhosting.com\/blog\/wp-content\/uploads\/2021\/05\/1621648409_734_Domains-section-of-WHMs-Tweak-Settings-Hosting.png\"\/><\/p>\n<p>If you wish to add a domain name that is pointed to some third-party nameservers that do not resolve to your server (Namecheap BasicDNS\/PremiumDNS, etc.), you need to set this option to <i><b>On<\/b><\/i>. As soon as the domain name is added, we recommend you switch it back to <i><b>Off<\/b><\/i>. <\/p>\n<p><b>Allow resellers to create accounts with subdomains of the server&#8217;s hostname<\/b><\/p>\n<p>This setting allows resellers to create accounts with subdomains of your server&#8217;s main domain name. <br \/>For example, if your hostname is <i>server1.nctest.net<\/i> and you want to create an account with the subdomain <i>sub.server1.nctest.net<\/i> using a reseller account, you need this option to be set to <i><b>On<\/b><\/i>, otherwise, you will receive the following error:<\/p>\n<p><img class=\"kb-image\" src=\"https:\/\/oxhosting.com\/blog\/wp-content\/uploads\/2021\/05\/1621648409_757_Domains-section-of-WHMs-Tweak-Settings-Hosting.png\"\/><\/p>\n<p>The user with <i>root <\/i>privileges will still be able to create accounts with the subdomains of the server hostname, even with this option disabled.<\/p>\n<p>The default value is <b><i>Off<\/i><\/b>.<\/p>\n<p><b>Allow unregistered domains<\/b><\/p>\n<p>This setting allows users who did not register domain names with a valid registrar to create them on the server.<\/p>\n<p>If a domain name does not have any nameservers set, it will be treated as an unregistered domain name. <\/p>\n<p>By default, the value is set to <i><b>Off <\/b><\/i>and if you add an unregistered domain name, you will receive the following error:<\/p>\n<p><img class=\"kb-image\" src=\"https:\/\/oxhosting.com\/blog\/wp-content\/uploads\/2021\/05\/1621648409_350_Domains-section-of-WHMs-Tweak-Settings-Hosting.png\"\/><\/p>\n<p>You may need to enable this option to add domain names of some CC TLDs that require you to create a DNS zone before you can switch the nameservers.<\/p>\n<p><b>Automatically add &#8220;A&#8221; entries for registered nameservers when creating a new zone<\/b><\/p>\n<p>By default, the value is set to <b><i>On <\/i><\/b>and the system automatically creates &#8220;A&#8221; DNS records for a new domain name&#8217;s registered nameservers when a user creates a domain name.<\/p>\n<p>It&#8217;s useful for setting up private nameservers as you will not need to create those records manually.<\/p>\n<p><b>Replace SSL certificates that do not match the local hostname<\/b><\/p>\n<p>This option tells the system to replace any SSL certificates that do not match the hostname of the server with a cPanel-signed certificate. This includes wildcard certificates.<\/p>\n<p>This feature is useful if you wish to cover your domain names with cPanel-signed SSL certificates. <\/p>\n<p>The default value is <i><b>On<\/b><\/i>.<\/p>\n<p><b>Prevent cPanel users from creating specific domains<\/b><\/p>\n<p>This setting prevents users from creating certain domain names that are contained in the <i>\/var\/cpanel\/commondomains<\/i> and <i>\/usr\/local\/cpanel\/etc\/commondomains<\/i> files.<\/p>\n<p>You can check the list of user-denied domain names by running the command via SSH:<\/p>\n<pre class=\"prettyprint\">cat \/usr\/local\/cpanel\/etc\/commondomains<\/pre>\n<p>Here it contains commonly-known domain names such as<i> google.com<\/i> and <i>apple.com<\/i>.<\/p>\n<p>You can also create your own list of user-denied domain names by editing the <i>\/var\/cpanel\/commondomains<\/i> file.<\/p>\n<p>By default, the value is set to <i><b>On <\/b><\/i>and we recommend that you keep it this way for enhanced security.<\/p>\n<p><b>Check zone syntax<\/b><\/p>\n<p>By default, the value is set to <i><b>On <\/b><\/i>which allows you to have the system automatically check zone file syntax whenever a user saves or syncs DNS zone files.<\/p>\n<p>This option helps to ensure all your DNS zones are working properly. <\/p>\n<p><b>Check zone owner<\/b><\/p>\n<p>By default, the value is set to <i><b>On <\/b><\/i>which allows you to have the system automatically check a DNS zone&#8217;s owner whenever a user saves or syncs DNS zone files.<\/p>\n<p>This option helps to ensure all your DNS zones have correct owners.<\/p>\n<p><b>Enable DKIM on domains for newly-created accounts<\/b><\/p>\n<p>This option allows you to specify, by default, whether to enable DKIM for new accounts.<\/p>\n<p><b>DKIM <\/b>(Domain Keys Identified Mail) is a way to authenticate email. It allows an email system to prove that a message is valid, <b>not forged<\/b> and that it came from the specified domain name. You can find more info about DKIM in this guide.<\/p>\n<p>The default value is <i><b>On<\/b><\/i>.<\/p>\n<p><b>Enable SPF on domains for newly-created accounts<\/b><\/p>\n<p>This option allows you to specify, by default, whether to enable SPF (Sender Policy Framework) for new accounts.<\/p>\n<p><b>SPF <\/b>is a method of email authentication. It protects <b>against email address spoofing<\/b>; the unfortunate situation where spammers and fraudsters send out emails on behalf of the real email address owner. You can find more info about SPF in this guide.<\/p>\n<p>The default value is <i><b>On<\/b><\/i>.<\/p>\n<p><b>DNS request management application<\/b><\/p>\n<p>This option specifies the application that the system uses to handle DNS management requests. <\/p>\n<p>To specify a new application, enter the path to the application that you wish to use in the text box.<\/p>\n<p>The default value is <i>dnsadmin, auto-detect SSL<\/i>.<\/p>\n<p><b><i>dnsadmin <\/i><\/b>is a program that is used by cPanel &amp; WHM to pass updated DNS to the server&#8217;s DNS server. It can also be run as a service\/daemon so that it does not need to be shut down and restarted when a DNS update is made.<\/p>\n<p>If you are not sure if you need to change this option, <b>do not<\/b> change it.<\/p>\n<p><b>Service subdomains<\/b><\/p>\n<p>This option allows users to access cPanel services via standard HTTP ports: 80 and 443 via service subdomains. Users who cannot use cPanel &amp; WHM default ports due to their firewall configuration should be able to use this service subdomains to access cPanel &amp; WHM services. Also, for many users, it&#8217;s easier to remember the service subdomain address than the port numbers.<\/p>\n<p>With this option set to <i><b>On <\/b><\/i>by default, the following subdomains are used to deliver services (<i>nctest.info<\/i> is used as an example and should be replaced with your own domain name):<\/p>\n<ul>\n<li><i>cpanel.nctest.info<\/i> delivers to the user&#8217;s cPanel interface<\/li>\n<li><i>whm.nctest.info<\/i> delivers to the user&#8217;s WHM interface<\/li>\n<li><i>webmail.nctest.info<\/i> delivers to the user&#8217;s Webmail interface<\/li>\n<li><i>webdisk.nctest.info<\/i> delivers to the user&#8217;s Web Disk interface<\/li>\n<\/ul>\n<p>To use this option, it&#8217;s crucial that you <b>do not<\/b> manually disable <i>mod_rewrite<\/i>, <i>mod_headers<\/i>, or <i>mod_proxy<\/i> in the <i>httpd.conf<\/i> file.<\/p>\n<p><b>Service subdomain creation<\/b><\/p>\n<p>By default, the value is set to <i><b>On<\/b><\/i>, which allows you to automatically create <i><b>cpanel<\/b><\/i>, <i><b>webmail<\/b><\/i>, <i><b>webdisk<\/b><\/i>, <i><b>cpcalendars<\/b><\/i>, <i><b>cpcontacts<\/b><\/i>, and <i><b>whm <\/b><\/i>service subdomain DNS entries for new accounts.<\/p>\n<p>You must have DNS records created in order to use service subdomains. If you use service subdomains, you will ultimately want this option to be enabled as well.<\/p>\n<p><b>Thunderbird and Outlook autodiscover and autoconfiguration support (enables service subdomain and SRV record creation)<\/b><\/p>\n<p><b>NOTE:<\/b> You need to set the <b>Service subdomain creation<\/b> to <i><b>On <\/b><\/i>in order to use this option.<\/p>\n<p>This feature automatically creates the <i><b>autodiscover <\/b><\/i>and <i><b>autoconfiguration <\/b><\/i>service subdomains while creating a domain name. For example:<\/p>\n<ul>\n<li><i>autoconfig.nctest.info <\/i><\/li>\n<li><i>autodiscover.nctest.info<\/i><\/li>\n<\/ul>\n<p>Also, this option creates the <i><b>autodiscover <\/b><\/i>and <i><b>autoconfiguration <\/b><\/i>SRV records that are required for Outlook and Thunderbird email automatic configurations, using only the email address, username, and password, without specifying all the settings manually.<\/p>\n<p>The default value is <i><b>Off<\/b><\/i>.<\/p>\n<p><b>Preferred mail service to configure to use for Thunderbird and Outlook\u00ae autodiscover and autoconfiguration support<\/b><\/p>\n<p><b>NOTE<\/b>: This option is only available when <b>Thunderbird and Outlook autodiscover and autoconfiguration support (enables service subdomain and SRV record creation)<\/b> is set to <i><b>On<\/b><\/i>.<\/p>\n<p>This feature allows you to select the incoming email transfer method to use with Thunderbird and Outlook with Autodiscover and AutoConfiguration support.<\/p>\n<p>The difference between the two is that the <b>POP3 <\/b>downloads these emails from the server to the email client. It also deletes emails from the server, though it can be configured to leave them.<\/p>\n<p><b>IMAP<\/b>, on the other hand, keeps the connection open while the email client is running and synchronizes emails between the server and email clients on all connected devices, as well as message statuses. <\/p>\n<p>The default value is set to <i>IMAP<\/i>, which is what we also recommend.<\/p>\n<p><b>Host to publish in the SRV records for Outlook autodiscover support<\/b><\/p>\n<p><b>NOTE:<\/b> This option is only available when <b>Thunderbird and Outlook autodiscover and autoconfig support (enables service subdomain and SRV record creation)<\/b> is set to <i><b>On<\/b><\/i>.<\/p>\n<p>Microsoft\u00ae Outlook\u00ae&#8217;s Autodiscover service searches DNS for an SRV record for an email inbox&#8217;s domain name that points to a particular server for Autodiscover. <\/p>\n<p>If you have an SSL enabled host with a Certificate Authority signed SSL certificate on this server and want to use it instead of the cPanel provided server, enter the Fully Qualified Domain Name in the available text box there.<\/p>\n<p>The default value is <i>cpanelemaildiscovery.cpanel.net<\/i>.<\/p>\n<p><b>Overwrite custom A records used for service subdomains<\/b><\/p>\n<p>By default, the option is set to <i><b>Off<\/b><\/i>.<\/p>\n<p><b>NOTE:<\/b> You need to have the <b>Service subdomain creation<\/b> to be set to On to use this option.<\/p>\n<p>If you enable it, custom &#8220;A&#8221; records that match service subdomains will be removed when you add or remove service subdomains.<\/p>\n<p>This option can be used if you wish to ensure the service subdomains have correct &#8220;A&#8221; records. <b>Do not<\/b> use it when custom &#8220;A&#8221; records for service subdomains may be useful for users.<\/p>\n<p><b>Overwrite custom SRV records used by Outlook AutoDiscover support<\/b><\/p>\n<p><b>NOTE:<\/b> This option is only available when <b>Thunderbird and Outlook autodiscover and autoconfig support (enables service subdomain and SRV record creation)<\/b> is set to <i><b>On<\/b><\/i>.<\/p>\n<p>This feature allows the system to remove any existing custom SRV records whenever the user adds or removes Outlook Autodiscover support.<\/p>\n<p>The default value is <i><b>Off <\/b><\/i>but can be changed to <i><b>On <\/b><\/i>if you wish to ensure SRV records used by AutoDiscover have correct values. <\/p>\n<p><b>Do not<\/b> use it when customer SRV records for AutoDiscover may be useful for users.<\/p>\n<p><b>Service subdomain override<\/b><\/p>\n<p><b>NOTE:<\/b> You need to have the <b>Service subdomain creation<\/b> to be set to <i><b>On <\/b><\/i>to use this option.<\/p>\n<p>The default value is <i><b>On<\/b><\/i>, which allows users to create the <i>cpanel<\/i>, <i>webmail<\/i>, <i>webdisk<\/i>, <i>cpcalendars<\/i>, <i>cpcontacts<\/i>, and <i>whm <\/i>subdomains that override automatically generated service subdomains.<\/p>\n<p><b>Restrict document roots to public_html<\/b><\/p>\n<p>This option is set to <i><b>On <\/b><\/i>by default and prevents the creation of addon domain names and subdomains outside of a cPanel user&#8217;s primary domain name&#8217;s document root (the <i>\/public_html<\/i> directory within the user&#8217;s home directory).<br \/>\u00a0<br \/>For example, if you create the <i>nctest.info<\/i> addon domain with this option enabled, the system creates the <i>\/home\/username\/public_html\/nctest.info <\/i>directory rather than the <i>\/home\/username\/nctest.info<\/i> directory.<\/p>\n<p><b>Use a Global DCV rewrite exclude instead of .htaccess modification<\/b><\/p>\n<p>This option allows Apache to use global <i>mod_rewrite<\/i> rules instead of the .htaccess modification so that the system does not process additional rewrite rules for Domain Control Validation (DCV) filenames. These rules no longer require cPanel &amp; WHM to modify each user&#8217;s .htaccess file. <\/p>\n<p>This option can help with the HTTP-based Domain Control Validation as no additional rewrite rules need to be created in .htaccess files.<\/p>\n<p>The default value is <i><b>On<\/b><\/i>.<\/p>\n<p><b>Always use authoritative (registered) nameservers when creating a new DNS zone<\/b><\/p>\n<p>The enabled option ignores the configured nameservers and sets the NS line to the authoritative (configured on the side of the DNS registrar) ones when adding a newly- registered domain name.<\/p>\n<p>This option is useful when you point domain names to registered private nameservers before adding them to your server.<\/p>\n<p>The default value is <b><i>Off<\/i><\/b>.<\/p>\n<p>Congrats! You&#8217;re now familiar with the Domains sections of the WHM&#8217;s Tweak Settings.<\/p>\n<\/div>\n<script data-ad-client=\"ca-pub-3214842754935876\" async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\n","protected":false},"excerpt":{"rendered":"<p>In this guide, we will look through the Domains sections of the WHM&#8217;s Tweak Settings menu. Tweak Settings allows you to configure many cPanel &amp;&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[],"_links":{"self":[{"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/posts\/6384"}],"collection":[{"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/comments?post=6384"}],"version-history":[{"count":0,"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/posts\/6384\/revisions"}],"wp:attachment":[{"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/media?parent=6384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/categories?post=6384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oxhosting.com\/blog\/wp-json\/wp\/v2\/tags?post=6384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}