what does "pdnsutil check-zone icfd3.org" on the Master say?

best regards,

Von: Pdns-users <pdns-users-boun...@mailman.powerdns.com> Im Auftrag von Tony 
Annese via Pdns-users
Gesendet: Montag, 5. Dezember 2022 12:20
An: pdns-users@mailman.powerdns.com
Betreff: Re: [Pdns-users] CNAME Resoluion

Externe E-Mail

Vorsicht! Links und Anhänge können Schadcode enthalten oder nachladen. 
Auffällige E-Mails als Anhang bitte an 
virench...@komsa.de<mailto:virench...@komsa.de> zur Prüfung weiterleiten.

Those were wildcard entries for the whole domain icfd3.org.

I've removed those and get the same behavior. It also doesn't explain why 
barracuda058130353572.icfd3.org does resolve.

PDNS is my master server and ns.whidbey.net/ns.whidbey.com are my slaves. I 
just added testing.icfd3.org and it was pushed out to the 2 slaves but the 
CNAME for sip.icfd3.org isn't even being pushed out to the slaves.

From: Brian Candler <b.cand...@pobox.com<mailto:b.cand...@pobox.com>>
Date: Sunday, December 4, 2022 at 11:20 PM
To: Tony Annese 
Subject: Re: [Pdns-users] CNAME Resoluion
On 05/12/2022 05:03, Tony Annese via Pdns-users wrote:
Here is the unobfuscated data.

Thank you, because that now makes it possible to help you:

$ dig +norec @ns.whidbey.net. sip.icfd3.org. any

sip.icfd3.org.        3600    IN    TXT    "v=spf1 mx 
include:ess.barracudanetworks.com include:spf.protection.outlook.com ~all"
sip.icfd3.org.        3600    IN    MX    0 d227914a.ess.barracudanetworks.com.
sip.icfd3.org.        3600    IN    MX    10 d227914b.ess.barracudanetworks.com.

You cannot have other resource records alongside a CNAME.  That's a requirement 
of the DNS, not of Powerdns specifically.

You should put A/AAAA records there.  Or if you want to avoid the duplication 
of information, you can look into ALIAS records which do this for you.
Pdns-users mailing list

Reply via email to