Due to the increased frequency of DOS attacks which are originating from open name servers, we have preconfigured all CPanel accounts's /etc/named.conf to allow recursion from 2 IPs only. These 2 IPs are localhost,, and the main IP of the account. These are the two entries that are defined in the /etc/resolv.conf file.

Going through the initial WHM setup, you will get a warning about using as a resolver entry. However, you will want to ignore this warning and keep the resolv.conf file as is. If you are uncomfortable doing this, then make sure that you place the IP you use to replace into the /etc/named.conf file to allow it to access the name server. Also, you will want to let us know as there is a config file outside of your account which will reset it on reboot.