How to Block Specific Subdomain Prefixes

[mediumfriedchips]

I’ve recently encountered an issue where some of my sites were hacked, and malicious subdomains were created to mimic well-known services like facebook.site.com and gmail.site.com. While I understand DirectAdmin currently allows blocking of complete domain names, I need a way of extending this feature to allow blocking of specific subdomain prefixes.

I know this might be a low level thing to be bothered about but it has bothered me enough to want to do something about it.

 

[ericosman]

Not the answer you are looking for, but making your server more secure is better than blocking certain subdomains.

Better not to brake a leg than to have crutches to walk with ready.

 

[Ohm J]

Just use external DNS like cloudflare and you can select any subdomain to online or not.

#note: for php-fpm, if one site hacked then all domains of that account could also hacked too.

 

[mediumfriedchips]

My server is pretty secure

Not the answer you are looking for, but making your server more secure is better than blocking certain subdomains.

Better not to brake a leg than to have crutches to walk with ready.

To be honest, my server is pretty secure

But unfortunately, the clients seem to be getting dumber by the year and there is no improvement in sight.

No matter how secure you make your server to be , someone will always find a way to get their details compromised. I am just trying to close every loophole possible.