Support » Plugin: Wordfence Security - Firewall & Malware Scan » DNS records always flagging as changed. The only change is the case.

  • Resolved Ben

    (@toolstd)


    Every time a scan runs on my site, Wordfence is flagging up that my DNS records have changed.

    When I investigate, the DNS records are exactly the same characters, only the case has changed from all uppercase to all lower case.

    For example, Wordfence will show me something like this in the scan results.

    Old DNS Records: MX.DOMAIN.COM

    New DNS Records: mx.domain.com

    I confirm that nothing has changed and “mark as fixed”, however next scan the problem is shown again.

    Does anyone have any idea what is causing this? And/or how I can “whitelist” it or stop it from happening?

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support WFGerroald

    (@wfgerald)

    Hey @toolstd,

    When you mark something as “fixed” and it isn’t actually fixed the scan will pick it up in the next scan. DNS records such as MX are case sensitive, so something has changed. You might speak with your host to help find out how this happened. But you can choose to IGNORE rather than FIXED to hide it from the Results Found list.

    https://www.dnscheck.co/faq#are-dns-records-case-sensitive

    Please let me know how it goes.

    Thanks,

    Gerroald

    Thanks for the reply Gerroald!

    I have asked my host what is happening with this and I will let you know what they say.

    There is no option for me to ignore this when it gets flagged up, just the option to mark as fixed. When other things have been flagged up in past the option to ignore has been available, but never with this issue. Any ideas?

    • This reply was modified 7 months, 3 weeks ago by Ben.

    My host is claiming that there is no way that the records are changing. I’m not really sure how I can solve this one then?

    Plugin Support WFGerroald

    (@wfgerald)

    Hey @toolstd,

    They’re definitely changing. You can check the DNS tracking link I shared and lookup other ones. With that said I’ve spoken with the developers and they’re going to update the code to ignore this type of change. I’m not sure when this will be implemented, but it will be.

    Thanks,

    Gerroald

    Ben

    (@toolstd)

    Thank you very much for all your help with this Gerroald.

    I think I will wait for this update! It could be very useful for me.

    But in the meantime, there is no option for me to ignore this when it gets flagged up, just the option to mark as fixed. When other things have been flagged up in past the option to ignore has been available, but never with this issue. Why is this?

    Is there any way I resolve this? As it’s popping up multiple times a day now and it’s becoming time consuming.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘DNS records always flagging as changed. The only change is the case.’ is closed to new replies.