Server-sided requests not originating from dedicated IP

damonewm

• April 13, 2016 16:15

If an account has a dedicated IP address and has a file that makes a request in the background, for example a cURL request from PHP, the IP address the request is sent through is the base server IP address rather than the dedicated IP of the account. Is there a setting in WHM I'm missing? This presents a security vulnerability when a 3rd party service requires the site's IP be whitelisted, which affectively gives everyone on the server permissions to impersonate the account in question.

• 

  cPanelMichael

  • April 13, 2016 21:32

  Hello :) There are no native features in cPanel that alter the network configuration of the server to use a specific IP address for outgoing connections. You can manipulate the network configuration files on your system to change the IP address used for outgoing connections, but I'm not familiar with any workarounds that would allow you to do this on a per-account basis. Thank you.

  0
• 

  damonewm

  • April 13, 2016 22:18

  Is there a fix planned for this?

  0
• 

  cPanelMichael

  • April 14, 2016 21:53

  There are no planned resolutions, as it's not a feature that's offered in the product. However, you are welcome to open a feature request for this via: Submit A Feature Request Keep in mind that network configurations are generally considered part of the duties of system administration. Thank you.

  0

Please sign in to leave a comment.