Cloudflare Developers•3y ago

is the CNAME proxied?

EErisa is the CNAME proxied?

dave•2/15/23, 4:56 PM

No.

ErisaOP•2/15/23, 4:56 PM

fun

dave•2/15/23, 5:01 PM

ah looks like it's out of scope for this specific vendor's bug bounty

dave•2/15/23, 5:01 PM

sad

dave•2/15/23, 5:49 PM

Is there anything like MailChannels (i.e. free or close to it) for email address validation?

dave•2/15/23, 5:54 PM

debounce seems the cheapest. https://debounce.io/pricing/

DeBounce

Pricing - DeBounce

DeBounce pricing model is simple. Only pay for what you use. No overages, buy exactly what you need and credits never expire.

dave•2/15/23, 5:55 PM

oh, they aren't taking new customers lol

dave•2/15/23, 6:07 PM

I guess ZeroBounce?

Unsmart•2/15/23, 6:47 PM

I dont think you can

Aiden [Switched to @aidendotgg]•2/15/23, 6:49 PM

why is cloudflare taking so long to create an edge certificate for my domain?

Chaika•2/15/23, 7:22 PM

Your Universal? On a new domain you just added?

CChaika Your Universal? On a new domain you just added?

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

Yep

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

usually its instant

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

like as soon as nameservers propagate

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

but i've seen major delay recently

Chaika•2/15/23, 7:36 PM

I've never had it take more then ~30 mins or so for me, although you're certainly not the first to have issues with it taking a bit. CF says it can take "up to 24 hours", and the recommendation I usually see is just to turn it off, wait a few mins, and turn it back on
https://community.cloudflare.com/t/community-tip-best-practices-for-certificate-provisioning/44230
What is the domain?

CChaika I've never had it take more then ~30 mins or so for me, although you're certainl...

Aiden [Switched to @aidendotgg]•2/15/23, 7:39 PM

Probably not the best idea to send the domain here as its vulgar and kind of offensive

. I'll try what you said and turn it off for a bit and then turn it back on

Chaika•2/15/23, 7:42 PM

I would just double check there's nothing wrong with it. Make sure your dnssec is valid (or don't have any, just make sure you don't see Bogus) https://dnsviz.net/, dig via 1.1.1.1 dig yourdomain.tld @1.1.1.1dig yourdomain.tld @1.1.1.1 and see if it resolves without dnssec/etc errors, no domain status codes like clientHoldclientHold that may be preventing dns resolution, whois yourdomain.tldwhois yourdomain.tld, just basic sanity checks

Aiden [Switched to @aidendotgg]•2/15/23, 7:44 PM

https://owner.singed.host/files/ⓣⓤⓔⓒⓒⓒⓝⓚⓕⓗ‎

Size: 9.52 KB | Upload: #27417

AAiden [Switched to @aidendotgg]https://owner.singed.host/files/ⓣⓤⓔⓒⓒⓒⓝⓚⓕⓗ‎

Chaika•2/15/23, 7:45 PM

Those look fine, no dnssec problems either?

DDeleted User How to fix this?

Chaika•2/15/23, 7:46 PM

Looks like you have TLS Decryption on within Zero Trust, used to inspect https traffic. You can either disable it, or install Cloudflare's root certs
https://developers.cloudflare.com/cloudflare-one/policies/filtering/http-policies/tls-decryption/

CChaika Those look fine, no dnssec problems either?

Aiden [Switched to @aidendotgg]•2/15/23, 7:47 PM

https://owner.singed.host/files/ⓛⓙⓖⓩⓩⓡⓤⓒⓨⓚ‎

Size: 11.12 KB | Upload: #27419

Chaika•2/15/23, 7:48 PM

You have broken DNSSEC looks like

Chaika•2/15/23, 7:48 PM

Probably had it enabled at your old DNS Host and didn't disable it when transferring

Chaika•2/15/23, 7:49 PM

@skrrrtt
https://developers.cloudflare.com/dns/additional-options/dnssec/
You can disable it at your Registrar. After you disable it, you can re-enable it with Cloudflare's DNSSEC Settings (see the guide above), or keep it disabled.

Usually it's recommended you disable it before switching nameservers, switch over, wait for propagation, and then set it up, but that ship has already sailed

DDeleted User When I'm connected with this can I also connect to the Server I have also in the...

Chaika•2/15/23, 7:52 PM

You can use/setup WARP Private Networking via a CF Tunnel
https://developers.cloudflare.com/cloudflare-one/tutorials/warp-to-tunnel/
or there was a beta for each device connected to WARP being able to communicate with each other, but I'm not sure what happened to that. That would require your server being connected to WARP too though, Private Networking would probably be a better fit if you want to connect to a Server

CChaika @skrrrtt <https://developers.cloudflare.com/dns/additional-options/dnssec/> You...

Aiden [Switched to @aidendotgg]•2/15/23, 7:52 PM

Yeah I don't own the domain it was a domain that someone was trying to add to my service. For some reason he bought it today and it had DNSSEC enabled but his other domains didn't https://owner.singed.host/files/ⓓⓝⓨⓑⓙⓨⓞⓧⓖⓓ‎

Size: 7.55 KB | Upload: #27421

Aiden [Switched to @aidendotgg]•2/15/23, 7:52 PM

weird, but thanks for the help

AAiden [Switched to @aidendotgg]Yeah I don't own the domain it was a domain that someone was trying to add to my...

Chaika•2/15/23, 7:53 PM

That is strange, that's porkbun right? Never had an issue like that before with them.
Anyway that explains your Universal SSL problem, fix that, wait a bit (potentially could toggle on/off universal ssl to get it to retry faster), and it should issue without any problem

CChaika That is strange, that's porkbun right? Never had an issue like that before with ...

Aiden [Switched to @aidendotgg]•2/15/23, 7:56 PM

Yeah I have 80+ domains on porkbun and haven't had that ever happen to me dead

AAiden [Switched to @aidendotgg]Yeah I have 80+ domains on porkbun and haven't had that ever happen to me <:dead...

dave•2/15/23, 8:22 PM

80+?!

Ddave 80+?!

Aiden [Switched to @aidendotgg]•2/15/23, 8:25 PM

Yeah it’s for the sharex file hosting service I run. I usually only pay for first year registration besides a select few that are too good to let expire.

Aiden [Switched to @aidendotgg]•2/15/23, 8:25 PM

So it’s not that expensive I guess

Aiden [Switched to @aidendotgg]•2/15/23, 8:26 PM

I have about 260 domains on my cloudflare account

Aiden [Switched to @aidendotgg]•2/15/23, 8:26 PM

dave•2/15/23, 8:27 PM

dear lord

dave•2/15/23, 8:27 PM

I have 28, but 26 of those are purely to avoid domain squatters.

Ddave I have 28, but 26 of those are purely to avoid domain squatters.

Aiden [Switched to @aidendotgg]•2/15/23, 8:28 PM

Wdym by that?