Cloudflare Developers•3y ago

huh, why am I allowed to have a MX and CNAME record on the same subdomain?

Unsmart•2/15/23, 4:47 PM

why wouldnt you be?

daveOP•2/15/23, 4:49 PM

How do email providers know which one to use?

Chaika•2/15/23, 4:49 PM

that is strange, CNAME should mean "redirect" or follow x to get any records. Mail senders even follow CNAMEs to get MX Records

daveOP•2/15/23, 4:50 PM

which one would get priority?

Chaika•2/15/23, 4:54 PM

You're using CF DNS, right? Not sure if it's universal behavior, but it looks like if you have an MX Record and a CNAME, Providers would lookup the MX Record, and CF returns the MX Record you created for that hostname. Only if there is no MX record does it return the CNAME

daveOP•2/15/23, 4:55 PM

yeah, CF DNS

Chaika•2/15/23, 4:55 PM

It probably is Universal behavior actually, makes sense too, CNAME is only returned if searching for it directly or no record of the query type exists

Ddave huh, why am I allowed to have a MX and CNAME record on the same subdomain?

Erisa•2/15/23, 4:55 PM

is the CNAME proxied?

EErisa is the CNAME proxied?

daveOP•2/15/23, 4:56 PM

No.

Erisa•2/15/23, 4:56 PM

fun

daveOP•2/15/23, 5:01 PM

ah looks like it's out of scope for this specific vendor's bug bounty

daveOP•2/15/23, 5:01 PM

sad

daveOP•2/15/23, 5:49 PM

Is there anything like MailChannels (i.e. free or close to it) for email address validation?

daveOP•2/15/23, 5:54 PM

debounce seems the cheapest. https://debounce.io/pricing/

DeBounce

Pricing - DeBounce

DeBounce pricing model is simple. Only pay for what you use. No overages, buy exactly what you need and credits never expire.

daveOP•2/15/23, 5:55 PM

oh, they aren't taking new customers lol

daveOP•2/15/23, 6:07 PM

I guess ZeroBounce?

Unsmart•2/15/23, 6:47 PM

I dont think you can

Aiden [Switched to @aidendotgg]•2/15/23, 6:49 PM

why is cloudflare taking so long to create an edge certificate for my domain?

Chaika•2/15/23, 7:22 PM

Your Universal? On a new domain you just added?

CChaika Your Universal? On a new domain you just added?

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

Yep

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

usually its instant

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

like as soon as nameservers propagate

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

but i've seen major delay recently

Chaika•2/15/23, 7:36 PM

I've never had it take more then ~30 mins or so for me, although you're certainly not the first to have issues with it taking a bit. CF says it can take "up to 24 hours", and the recommendation I usually see is just to turn it off, wait a few mins, and turn it back on
https://community.cloudflare.com/t/community-tip-best-practices-for-certificate-provisioning/44230
What is the domain?

CChaika I've never had it take more then ~30 mins or so for me, although you're certainl...

Aiden [Switched to @aidendotgg]•2/15/23, 7:39 PM

Probably not the best idea to send the domain here as its vulgar and kind of offensive

. I'll try what you said and turn it off for a bit and then turn it back on

Chaika•2/15/23, 7:42 PM

I would just double check there's nothing wrong with it. Make sure your dnssec is valid (or don't have any, just make sure you don't see Bogus) https://dnsviz.net/, dig via 1.1.1.1 dig yourdomain.tld @1.1.1.1dig yourdomain.tld @1.1.1.1 and see if it resolves without dnssec/etc errors, no domain status codes like clientHoldclientHold that may be preventing dns resolution, whois yourdomain.tldwhois yourdomain.tld, just basic sanity checks

Aiden [Switched to @aidendotgg]•2/15/23, 7:44 PM

https://owner.singed.host/files/ⓣⓤⓔⓒⓒⓒⓝⓚⓕⓗ‎

Size: 9.52 KB | Upload: #27417

AAiden [Switched to @aidendotgg]https://owner.singed.host/files/ⓣⓤⓔⓒⓒⓒⓝⓚⓕⓗ‎

Chaika•2/15/23, 7:45 PM

Those look fine, no dnssec problems either?

DDeleted User How to fix this?

Chaika•2/15/23, 7:46 PM

Looks like you have TLS Decryption on within Zero Trust, used to inspect https traffic. You can either disable it, or install Cloudflare's root certs
https://developers.cloudflare.com/cloudflare-one/policies/filtering/http-policies/tls-decryption/

CChaika Those look fine, no dnssec problems either?

Aiden [Switched to @aidendotgg]•2/15/23, 7:47 PM

https://owner.singed.host/files/ⓛⓙⓖⓩⓩⓡⓤⓒⓨⓚ‎

Size: 11.12 KB | Upload: #27419

Chaika•2/15/23, 7:48 PM

You have broken DNSSEC looks like

Chaika•2/15/23, 7:48 PM

Probably had it enabled at your old DNS Host and didn't disable it when transferring

Chaika•2/15/23, 7:49 PM

@skrrrtt
https://developers.cloudflare.com/dns/additional-options/dnssec/
You can disable it at your Registrar. After you disable it, you can re-enable it with Cloudflare's DNSSEC Settings (see the guide above), or keep it disabled.

Usually it's recommended you disable it before switching nameservers, switch over, wait for propagation, and then set it up, but that ship has already sailed

DDeleted User When I'm connected with this can I also connect to the Server I have also in the...

Chaika•2/15/23, 7:52 PM

You can use/setup WARP Private Networking via a CF Tunnel
https://developers.cloudflare.com/cloudflare-one/tutorials/warp-to-tunnel/
or there was a beta for each device connected to WARP being able to communicate with each other, but I'm not sure what happened to that. That would require your server being connected to WARP too though, Private Networking would probably be a better fit if you want to connect to a Server

CChaika @skrrrtt <https://developers.cloudflare.com/dns/additional-options/dnssec/> You...

Aiden [Switched to @aidendotgg]•2/15/23, 7:52 PM

Yeah I don't own the domain it was a domain that someone was trying to add to my service. For some reason he bought it today and it had DNSSEC enabled but his other domains didn't https://owner.singed.host/files/ⓓⓝⓨⓑⓙⓨⓞⓧⓖⓓ‎

Size: 7.55 KB | Upload: #27421

Aiden [Switched to @aidendotgg]•2/15/23, 7:52 PM

weird, but thanks for the help

AAiden [Switched to @aidendotgg]Yeah I don't own the domain it was a domain that someone was trying to add to my...

Chaika•2/15/23, 7:53 PM

That is strange, that's porkbun right? Never had an issue like that before with them.
Anyway that explains your Universal SSL problem, fix that, wait a bit (potentially could toggle on/off universal ssl to get it to retry faster), and it should issue without any problem

CChaika That is strange, that's porkbun right? Never had an issue like that before with ...

Aiden [Switched to @aidendotgg]•2/15/23, 7:56 PM

Yeah I have 80+ domains on porkbun and haven't had that ever happen to me dead

AAiden [Switched to @aidendotgg]Yeah I have 80+ domains on porkbun and haven't had that ever happen to me <:dead...

daveOP•2/15/23, 8:22 PM

80+?!

Ddave 80+?!

Aiden [Switched to @aidendotgg]•2/15/23, 8:25 PM

Yeah it’s for the sharex file hosting service I run. I usually only pay for first year registration besides a select few that are too good to let expire.

Aiden [Switched to @aidendotgg]•2/15/23, 8:25 PM

So it’s not that expensive I guess

Aiden [Switched to @aidendotgg]•2/15/23, 8:26 PM

I have about 260 domains on my cloudflare account

huh, why am I allowed to have a MX and CNAME record on the same subdomain?

Similar Threads

Similar Threads

Similar Threads